PT-2004-1013 · L2Tpd · L2Tpd

Publicado 2004-07-13 · Atualizado 2017-07-11 · CVE-2004-0649

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions l2tpd (affected versions not specified)

Description The issue is related to a buffer overflow in the write packet function in control.c for l2tpd, which may allow remote attackers to execute arbitrary code. Additionally, there are multiple vulnerabilities in the l2tpd package that can lead to breaches of confidentiality, integrity, and availability of protected information, and these can be exploited remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

BDU:2015-02586

CVE-2004-0649

DSA-530

Produtos afetados

L2Tpd

Referências · 8

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0649 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=108640917925735&w=2 · Nota
• http://debian.org/security/dsa-530 · Nota
• https://bdu.fstec.ru/vul/2015-02586 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2004-0649 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16326 · Nota
• http://debian.org/security/2004/dsa-530 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200407-17.xml · Aviso do Fabricante