PT-2002-1024 · Epic4 · Light

Publicado 2002-09-24 · Atualizado 2008-09-10 · CVE-2002-0984

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Light versions 2.7.x through 2.7.29 Light versions 2.8.x through 2.8pre9

Description The issue allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code. Multiple vulnerabilities in the epic4-script-light package may lead to disruption of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations For Light versions 2.7.x through 2.7.29, update to version 2.7.30p5 or later. For Light versions 2.8.x through 2.8pre9, update to version 2.8pre10 or later.

Correção

Identificadores relacionados

BDU:2015-03470

CVE-2002-0984

DSA-156

Produtos afetados

Light

Referências · 8

• https://bdu.fstec.ru/vul/2015-03470 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0984 · Nota de Segurança
• http://debian.org/security/2002/dsa-156 · Aviso do Fabricante
• http://iss.net/security_center/static/9943.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0984 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-08/0231.html · Nota
• http://securityfocus.com/bid/5555 · Nota
• http://debian.org/security/dsa-156 · Nota