PT-2003-1276 · Netbsd · Netbsd

Publicado 2003-03-31 · Atualizado 2008-09-05 · CVE-2002-1543

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetBSD versions 1.5 through 1.5.3

Description A buffer overflow issue in the trek application on NetBSD allows local users to gain privileges by providing long keyboard input.

Recommendations For NetBSD versions 1.5 through 1.5.3, consider restricting access to the trek application until a fix is available. As a temporary workaround, limit the length of keyboard input to prevent exploitation.

Correção

Identificadores relacionados

CVE-2002-1543

Produtos afetados

Netbsd

Referências · 5

• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-025.txt.asc · Aviso do Fabricante
• http://securityfocus.com/bid/6036 · Aviso do Fabricante
• http://osvdb.org/7570 · Nota
• http://iss.net/security_center/static/10458.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1543 · Nota de Segurança