PT-2001-2341 · Daydream · Daydream Bbs

Publicado 2001-12-30 · Atualizado 2008-09-05 · CVE-2001-1207

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DayDream BBS versions 2.9 through 2.13

Description The issue concerns buffer overflows that could allow remote attackers to possibly execute arbitrary code. This is achieved via specific control codes, including ~#MC, ~#TF, and ~#RA.

Recommendations For DayDream BBS versions 2.9 through 2.13, consider disabling the control codes ~#MC, ~#TF, and ~#RA as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2001-1207

Produtos afetados

Daydream Bbs

Referências · 5

• 🔥 http://securityfocus.com/archive/1/247708 · Exploit
• http://securityfocus.com/bid/3757 · Aviso do Fabricante
• http://cs.uku.fi/~hlyytine/daydream-2.11/ChangeLog · Nota
• http://iss.net/security_center/static/7755.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1207 · Nota de Segurança