PT-2002-1636 · Aol · Aolserver

Publicado 2002-06-11 · Atualizado 2008-09-05 · CVE-2002-0586

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AOLServer versions 3.0 through 3.4.2

Description The issue concerns a format string vulnerability in the Ns PdLog function of the external database driver proxy daemon library. This vulnerability allows remote attackers to execute arbitrary code via the Error or Notice parameters.

Recommendations For AOLServer versions 3.0 through 3.4.2, consider restricting access to the Ns PdLog function until a patch is available. As a temporary workaround, avoid using the Error or Notice parameters in the affected library to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0586

Produtos afetados

Aolserver

Referências · 6

• http://sourceforge.net/tracker/index.php?func=detail&aid=533141&group_id=3152&atid=303152 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html · Aviso do Fabricante
• http://securityfocus.com/bid/4535 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0586 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0586 · Nota de Segurança
• http://iss.net/security_center/static/8860.php · Aviso do Fabricante