PT-2002-1552 · Posadis · Posadis Dns Server

Publicado 2002-08-12 · Atualizado 2008-09-05 · CVE-2002-0501

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Posadis DNS server versions prior to m5pre2

Description The issue concerns a format string vulnerability in the log print() function. This vulnerability potentially allows local users and possibly remote attackers to execute arbitrary code via format strings inserted into logging messages.

Recommendations For versions prior to m5pre2, update to version m5pre2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2002-0501

Produtos afetados

Posadis Dns Server

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-0501 · Nota de Segurança
• http://securityfocus.com/bid/4378 · Aviso do Fabricante
• http://osvdb.org/3516 · Nota
• http://online.securityfocus.com/archive/1/264450 · Aviso do Fabricante
• http://iss.net/security_center/static/8653.php · Aviso do Fabricante
• http://sourceforge.net/forum/forum.php?forum_id=165094 · Nota