PT-2001-1008 · Debian · Analog

Publicado 2001-04-17 · Atualizado 2017-10-10 · CVE-2001-0301

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Analog versions prior to 4.16

Description The issue concerns multiple vulnerabilities in the Analog package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by constructing large strings using the ALIAS command.

Recommendations For Analog versions prior to 4.16, update to version 4.16 or later to resolve the issue. As a temporary workaround, consider restricting access to the ALIAS command to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-02865

CVE-2001-0301

Produtos afetados

Analog

Referências · 11

• http://debian.org/security/2001/dsa-033 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6105 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2001-02/0264.html · Aviso do Fabricante
• http://debian.org/security/dsa-033 · Nota
• http://archives.neohapsis.com/archives/linux/redhat/2001-q1/0056.html · Aviso do Fabricante
• http://osvdb.org/1762 · Nota
• http://analog.cx/security2.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-02865 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0301 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2001-0301 · Nota de Segurança
• http://securityfocus.com/bid/2377 · Aviso do Fabricante