PT-2000-1526 · Winproxy · Winproxy

Publicado 2000-06-27 · Atualizado 2008-09-10 · CVE-2000-0592

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WinProxy versions 2.0 through 2.0.1

Description The issue concerns buffer overflows in the POP3 service, allowing remote attackers to execute arbitrary commands. This can be achieved by sending long commands such as USER, PASS, LIST, RETR, or DELE.

Recommendations For WinProxy version 2.0, update to a version that fixes the buffer overflow issue in the POP3 service. For WinProxy version 2.0.1, update to a version that fixes the buffer overflow issue in the POP3 service. As a temporary workaround, consider restricting access to the POP3 service until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2000-0592

Produtos afetados

Winproxy

Referências · 5

• 🔥 https://exploit-db.com/exploits/20040 · Exploit
• 🔥 http://securityfocus.com/templates/archive.pike?list=1&msg=[e-mail] · Exploit
• http://securityfocus.com/bid/1400 · Nota
• http://securityfocus.com/templates/archive.pike?list=1&msg=200006271417.GFE84146.-BJXON%40lac.co.jp · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0592 · Nota de Segurança