PT-2001-1588 · Data General · Dgux

Publicado 2001-05-24 · Atualizado 2017-12-19 · CVE-2001-0369

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DGUX version R4.20MU06 DGUX version R4.20MU02

Description A buffer overflow issue in the lpsched component allows a local attacker to gain root access by providing a long command line argument, specifically a non-existent printer name.

Recommendations For DGUX version R4.20MU06, update to a version that fixes the buffer overflow issue in lpsched to prevent local attackers from obtaining root access. For DGUX version R4.20MU02, update to a version that fixes the buffer overflow issue in lpsched to prevent local attackers from obtaining root access. As a temporary workaround, consider restricting access to the lpsched component to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-0369

Produtos afetados

Dgux

Referências · 4

• 🔥 https://exploit-db.com/exploits/20697 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0369 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6258 · Nota
• http://marc.info/?l=bugtraq&m=98511407131984&w=2 · Nota