PT-2001-2663 · Novell+1 · Unixware+1

Publicado 2001-12-31 · Atualizado 2008-09-05 · CVE-2001-1579

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions UnixWare version 7 OpenUnix version 8.0.0

Description The issue is related to the timed program (in.timed) that does not properly terminate certain strings with a null. This allows remote attackers to cause a denial of service.

Recommendations For UnixWare version 7, ensure proper string termination in the timed program to prevent denial of service attacks. For OpenUnix version 8.0.0, modify the timed program to correctly null-terminate strings and prevent exploitation.

Correção

Identificadores relacionados

CVE-2001-1579

Produtos afetados

Open Unix

Unixware

Referências · 2

• http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0020.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1579 · Nota de Segurança