PT-2004-1014 · Debian · Jitterbug

Publicado 2004-02-03 · Atualizado 2017-10-10 · CVE-2004-0028

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions jitterbug version 1.6.2

Description The issue is related to improper input sanitization, which allows remote authenticated users to execute arbitrary commands. Multiple vulnerabilities in the jitterbug package of the Debian GNU/Linux operating system can lead to breaches of confidentiality, integrity, and availability of protected information, and these vulnerabilities can be exploited remotely.

Recommendations For jitterbug version 1.6.2, update to a version that properly sanitizes inputs to prevent arbitrary command execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

BDU:2015-02667

CVE-2004-0028

DSA-420

Produtos afetados

Jitterbug

Referências · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0028 · Nota de Segurança
• http://debian.org/security/dsa-420 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14207 · Nota
• https://bdu.fstec.ru/vul/2015-02667 · Nota de Segurança
• http://securityfocus.com/bid/9397 · Aviso do Fabricante
• http://debian.org/security/2004/dsa-420 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0028 · Nota de Segurança