PT-2003-1021 · Xbl · Xbl

Publicado 2003-06-24 · Atualizado 2008-09-05 · CVE-2003-0451

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions xbl version 1.0k and earlier

Description The issue concerns multiple buffer overflows that can be exploited by local users to gain privileges through certain long command line arguments. Additionally, there are multiple vulnerabilities in the xbl package that can lead to breaches of confidentiality, integrity, and availability of protected information, which can be exploited by a local attacker.

Recommendations For xbl version 1.0k and earlier, update to a version later than 1.0k to resolve the issue. As a temporary workaround, consider restricting the use of long command line arguments to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-03023

CVE-2003-0451

DSA-327

Produtos afetados

Xbl

Referências · 5

• https://bdu.fstec.ru/vul/2015-03023 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2003-0451 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0451 · Nota de Segurança
• http://debian.org/security/2003/dsa-327 · Aviso do Fabricante
• http://debian.org/security/dsa-327 · Nota