PT-2002-2503 · Delegate · Delegate

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1781

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DeleGate versions 7.7.0 through 7.8.1

Description The issue allows remote attackers to execute arbitrary code due to multiple buffer overflows. This can be demonstrated by sending a long USER command to the POP proxy.

Recommendations For DeleGate versions 7.7.0 through 7.8.1, consider restricting access to the POP proxy until a patch is available. As a temporary workaround, limit the length of the USER command to prevent buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-1781

Produtos afetados

Delegate

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/8114 · Nota
• http://securityfocus.com/bid/4055 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1781 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-02/0051.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1781 · Nota
• http://globalintersec.com/adv/delegate-2002012101.txt · Aviso do Fabricante
• http://online.securityfocus.com/archive/1/256117 · Nota