PT-2004-1019 · Debian · Trr19

Publicado 2004-01-29 · Atualizado 2017-07-11 · CVE-2004-0047

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions trr19 versions 1.0

Description The issue concerns multiple vulnerabilities in the trr19 package of the Debian GNU/Linux operating system, which can be exploited by a local attacker to compromise the confidentiality, integrity, and availability of protected information. The vulnerabilities allow local users to potentially gain privileges due to improper privilege dropping before executing system commands.

Recommendations For trr19 version 1.0, consider restricting access to system commands until a patch is available to prevent local users from gaining privileges. As a temporary workaround, ensure that all system commands are executed with proper privilege handling to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-02956

CVE-2004-0047

DSA-430

Produtos afetados

Trr19

Referências · 11

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0047 · Nota de Segurança
• http://secunia.com/advisories/10744 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0047 · Nota de Segurança
• http://securityfocus.com/bid/9520 · Aviso do Fabricante
• http://securitytracker.com/id?1008875 · Nota
• http://debian.org/security/2004/dsa-430 · Aviso do Fabricante
• http://debian.org/security/dsa-430 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14975 · Nota
• http://secunia.com/advisories/10745 · Nota
• https://bdu.fstec.ru/vul/2015-02956 · Nota de Segurança
• http://osvdb.org/3747 · Nota