PT-2001-2659 · Apple · Personal Web Sharing

Publicado 2001-12-31 · Atualizado 2017-07-11 · CVE-2001-1575

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apple Personal Web Sharing (PWS) versions 1.1, 1.5, and 1.5.5

Description The issue allows remote attackers to cause a denial of service, possibly due to a buffer overflow, when Web Sharing authentication is enabled and a long password is used.

Recommendations For Apple Personal Web Sharing (PWS) version 1.1, consider disabling Web Sharing authentication until a fix is available. For Apple Personal Web Sharing (PWS) version 1.5, restrict the length of passwords to prevent potential buffer overflows. For Apple Personal Web Sharing (PWS) version 1.5.5, avoid using long passwords in Web Sharing authentication to minimize the risk of denial of service.

Correção

Identificadores relacionados

CVE-2001-1575

Produtos afetados

Personal Web Sharing

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/6759 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1575 · Nota de Segurança
• http://securityfocus.com/bid/2945 · Nota
• http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00409.html · Nota