PT-2003-1025 · Noffle+1 · Noffle+2

Publicado 2003-01-29 · Atualizado 2017-07-11 · CVE-2003-0037

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions noffle news server version 1.0.1 and earlier noffle (affected versions not specified)

Description The issue concerns buffer overflows in the noffle news server, allowing remote attackers to cause a denial of service and possibly execute arbitrary code. Multiple vulnerabilities in the noffle package of the Debian GNU/Linux operating system can lead to breaches of confidentiality, integrity, and availability of protected information, with exploitation possible remotely.

Recommendations For noffle news server version 1.0.1 and earlier, update to a version later than 1.0.1 to resolve the issue. For noffle, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

BDU:2015-03353

CVE-2003-0037

DSA-244

Produtos afetados

Debian

Noffle

Noffle News Server

Referências · 8

• http://debian.org/security/dsa-244 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0037 · Nota de Segurança
• http://debian.org/security/2003/dsa-244 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-0037 · Nota de Segurança
• http://securityfocus.com/bid/6695 · Nota
• http://secunia.com/advisories/7955 · Nota
• https://bdu.fstec.ru/vul/2015-03353 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11181 · Nota