PT-2003-2040 · Thomson · Thomson Tcw690+2

Murdok · Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1085

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Thomson TWC305 version ST42.03.0a Thomson TWC315 version ST42.03.0a Thomson TCW690 version ST42.03.0a

Description The issue allows remote attackers to cause unstable service, possibly due to a buffer overflow, by sending a long GET request to the HTTP server.

Recommendations For Thomson TWC305 version ST42.03.0a, restrict access to the HTTP server until a fix is available. For Thomson TWC315 version ST42.03.0a, limit the length of incoming GET requests to prevent unstable service. For Thomson TCW690 version ST42.03.0a, consider disabling the HTTP server as a temporary workaround until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2003-1085

Produtos afetados

Thomson Tcw690

Thomson Twc305

Thomson Twc315

Referências · 12

• 🔥 http://secunia.com/advisories/10286 · Exploit
• 🔥 https://exploit-db.com/exploits/25124 · Exploit
• 🔥 http://securityfocus.com/bid/9091 · Exploit
• 🔥 http://secunia.com/advisories/14353 · Exploit
• 🔥 http://shellsec.net/leer_advisory.php?id=2 · Exploit
• 🔥 http://securityfocus.com/archive/1/345414 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/014062.html · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13815 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1085 · Nota de Segurança
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/014068.html · Nota
• http://marc.info/?l=bugtraq&m=110888093214678&w=2 · Nota
• http://marc.info/?l=full-disclosure&m=110880725322192&w=2 · Nota