PT-2002-2932 · Chet · Chetcpasswd

Publicado

2002-12-31

·

Atualizado

2008-09-05

·

CVE-2002-2220

CVSS v2.0

6.2

Média

VetorAV:L/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: chetcpasswd versions prior to 1.12
Description: A buffer overflow issue exists when chetcpasswd is configured for access from 0.0.0.0, allowing local users to gain privileges via unspecified vectors.
Recommendations: For versions prior to 1.12, update to version 1.12 or later to resolve the issue. As a temporary workaround, consider restricting access to only necessary IP addresses instead of 0.0.0.0 to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2002-2220

Produtos afetados

Chetcpasswd