PT-2001-1032 · Slrn · Slrn

Publicado

2001-03-09

·

Atualizado

2017-12-19

·

CVE-2001-0441

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions slrn versions prior to 0.9.7.0
Description The issue is related to a buffer overflow in the wrapping and unwrapping functions of the slrn news reader, which can be exploited remotely. This can lead to the execution of arbitrary commands via a long message header, potentially disrupting the confidentiality, integrity, and availability of protected information.
Recommendations For versions prior to 0.9.7.0, update to version 0.9.7.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the slrn news reader until a patch is applied.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-07904
BDU:2015-07905
CVE-2001-0441

Produtos afetados

Slrn