PT-2002-1004 · Debian · Xtel

Publicado 2002-05-03 · Atualizado 2016-10-18 · CVE-2002-0334

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions xtel (xtell) versions 1.91.1 and earlier xtel (xtell) versions 2.x before 2.7

Description The issue concerns multiple vulnerabilities in the xtel (xtell) package of the Debian GNU/Linux operating system. These vulnerabilities can be exploited to compromise the confidentiality, integrity, and availability of protected information. The exploitation can be carried out remotely.

Recommendations For xtel (xtell) versions 1.91.1 and earlier, update to a version later than 1.91.1 to resolve the issue. For xtel (xtell) versions 2.x before 2.7, update to version 2.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the .xtell-log file to prevent a symlink attack until a patch is available.

Correção

Identificadores relacionados

BDU:2015-01330

BDU:2015-02180

CVE-2002-0334

Produtos afetados

Xtel

Referências · 12

• https://nvd.nist.gov/vuln/detail/CVE-2002-0334 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01330 · Nota de Segurança
• http://securityfocus.com/bid/4197 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0333 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-02180 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0332 · Nota de Segurança
• http://iss.net/security_center/static/8314.php · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0334 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=101494896516467&w=2 · Nota
• http://debian.org/security/dsa-090 · Nota
• http://debian.org/security/2002/dsa-121 · Aviso do Fabricante
• http://debian.org/security/dsa-121 · Nota