PT-2003-1239 · Unknown · Automatic File Distributor

Publicado 2003-03-18 · Atualizado 2008-09-05 · CVE-2002-1503

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Automatic File Distributor (AFD) versions 1.2.14 and earlier

Description The issue allows local users to gain privileges through a buffer overflow. This can be achieved via a long MON WORK DIR environment variable or the -w (workdir) argument to various commands, including afdcmd, afd ctrl, init afd, mafd, mon ctrl, show olog, and udc.

Recommendations For AFD versions 1.2.14 and earlier, consider restricting the use of the MON WORK DIR environment variable and the -w (workdir) argument to prevent exploitation until a patch is available. As a temporary workaround, limit the privileges of users who can execute the affected commands, such as afdcmd, afd ctrl, init afd, mafd, mon ctrl, show olog, and udc, to minimize the risk of privilege escalation.

Exploit

Correção

Identificadores relacionados

CVE-2002-1503

Produtos afetados

Automatic File Distributor

Referências · 6

• 🔥 http://securityfocus.com/bid/5626 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-09/0029.html · Exploit
• 🔥 https://exploit-db.com/exploits/21771 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1503 · Nota de Segurança
• http://dwd.de/AFD/txt/CHANGES · Nota
• http://iss.net/security_center/static/10036.php · Aviso do Fabricante