PT-2002-2678 · Pen · Pen

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1957

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pen versions 0.9.1 through 0.9.2

Description The issue is related to a buffer overflow in the netlog function, located in the pen.c file. This allows remote attackers to execute arbitrary commands by sending malformed log messages.

Recommendations For versions 0.9.1 and 0.9.2, update to a version that fixes the buffer overflow issue in the netlog function.

Correção

Identificadores relacionados

CVE-2002-1957

Produtos afetados

Pen

Referências · 4

• http://securityfocus.com/bid/5152 · Correção
• http://siag.nu/pen/news-0.9.3.shtml · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1957 · Nota de Segurança
• http://iss.net/security_center/static/9505.php · Correção