PT-2003-2326 · Amx · Amx

Greuff · Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1381

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AMX versions 0.9.2 and earlier

Description A format string issue allows remote attackers to execute arbitrary commands via format string specifiers in the amx say command.

Recommendations For AMX versions 0.9.2 and earlier, consider disabling the amx say command until a patch is available.

Exploit

Correção

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2003-1381

Produtos afetados

Amx

Referências · 6

• 🔥 https://exploit-db.com/exploits/22291 · Exploit
• http://securityfocus.com/bid/6968 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11427 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1381 · Nota de Segurança
• http://securityfocus.com/archive/1/313273 · Nota
• http://securityreason.com/securityalert/3258 · Nota