PT-2002-1007 · Log2Mail · Log2Mail

Publicado 2002-11-12 · Atualizado 2008-09-05 · CVE-2002-1251

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions log2mail versions prior to 0.2.5.1

Description The issue allows remote attackers to execute arbitrary code via a long log message, potentially leading to disruption of confidentiality, integrity, and availability of protected information. This can be exploited remotely.

Recommendations For versions prior to 0.2.5.1, update to version 0.2.5.1 or later to resolve the issue. As a temporary workaround, consider restricting the length of log messages to prevent buffer overflow until a patch is applied.

Correção

Identificadores relacionados

BDU:2015-02035

CVE-2002-1251

DSA-186

Produtos afetados

Log2Mail

Referências · 7

• http://debian.org/security/2002/dsa-186 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1251 · Nota de Segurança
• http://debian.org/security/dsa-186 · Nota
• https://bdu.fstec.ru/vul/2015-02035 · Nota de Segurança
• http://securityfocus.com/bid/6089 · Nota
• http://iss.net/security_center/static/10527.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1251 · Nota de Segurança