PT-2002-1012 · Debian · Smb2Www

Publicado 2002-12-11 · Atualizado 2008-09-10 · CVE-2002-1342

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions smb2www versions 980804-16 and earlier

Description The issue concerns multiple vulnerabilities in the smb2www package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. Remote attackers can execute arbitrary commands.

Recommendations For versions 980804-16 and earlier, consider disabling the vulnerable smb2www package until a patch is available. Restrict access to the smb2www module to minimize the risk of exploitation. Avoid using the smb2www package in sensitive operations until the issue is resolved.

Correção

Identificadores relacionados

BDU:2015-02887

CVE-2002-1342

DSA-203

Produtos afetados

Smb2Www

Referências · 10

• http://debian.org/security/dsa-203 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1342 · Aviso do Fabricante
• http://iss.net/security_center/static/10768.php · Nota
• http://debian.org/security/2002/dsa-203 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2002-1342 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-02887 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2002-1342 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1342 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2002-1342 · Nota de Segurança
• http://securityfocus.com/bid/6313 · Nota