PT-2001-2650 · Unknown+1 · Libvanessa Logger+1

Publicado 2001-12-31 · Atualizado 2008-09-05 · CVE-2001-1566

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Perdition version 0.1.8 libvanessa logger version 0.0.1

Description The issue allows remote attackers to execute arbitrary code via format string specifiers in the vanessa logger log function. This is a result of a format string vulnerability in libvanessa logger.

Recommendations For Perdition version 0.1.8, consider disabling the vanessa logger log function until a patch is available. For libvanessa logger version 0.0.1, restrict access to the vulnerable vanessa logger log function to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-1566

Produtos afetados

Perdition

Libvanessa Logger

Referências · 8

• http://vergenet.net/linux/perdition/string_format.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1566 · Nota de Segurança
• http://securityfocus.com/bid/3740 · Correção
• https://security-tracker.debian.org/tracker/CVE-2001-1566 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0082.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2001-1566 · Aviso do Fabricante
• http://derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0260.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2001-1566 · Aviso do Fabricante