PT-2002-2762 · Rtos · Rtos

Publicado 2002-12-31 · Atualizado 2008-09-10 · CVE-2002-2041

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RTOS version 6.1.0

Description The issue concerns multiple buffer overflows that allow local users to execute arbitrary code. This can be achieved through either a long ABLANG environment variable in phlocale or a long -u option to pkg-installer.

Recommendations For RTOS version 6.1.0, consider restricting access to phlocale and pkg-installer to minimize the risk of exploitation. As a temporary workaround, avoid using long ABLANG environment variables in phlocale and long -u options to pkg-installer until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2002-2041

Produtos afetados

Rtos

Referências · 8

• 🔥 http://securityfocus.com/bid/4917 · Exploit
• 🔥 https://exploit-db.com/exploits/21505 · Exploit
• 🔥 https://exploit-db.com/exploits/21506 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2041 · Nota de Segurança
• http://iss.net/security_center/static/9259.php · Nota
• http://iss.net/security_center/static/9258.php · Nota
• http://securityfocus.com/bid/4918 · Nota
• http://online.securityfocus.com/archive/1/275218 · Nota