PT-2001-1060 · Licq · Licq

Publicado 2001-02-28 · Atualizado 2017-10-10 · CVE-2001-0439

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions licq versions 1.0.2 and earlier licq before 1.0.3

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a URL, potentially leading to a breach of confidentiality, integrity, and availability of protected information.

Recommendations For licq version 1.0.2, update to version 1.0.3 or later to resolve the issue. For licq versions prior to 1.0.3, update to version 1.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to URLs that may contain shell metacharacters until a patch is available.

Correção

Identificadores relacionados

BDU:2015-08155

CVE-2001-0439

Produtos afetados

Licq

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/6261 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0439 · Nota de Segurança
• http://archives.neohapsis.com/archives/freebsd/2001-04/0607.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2001-023.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2001-022.html · Aviso do Fabricante
• http://osvdb.org/5641 · Nota
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000389 · Correção, Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-08155 · Nota de Segurança
• https://rhn.redhat.com/errata/RHSA-2001-022.html · Nota
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-032.php3 · Aviso do Fabricante