PT-2004-1022 · Pwlib+1 · Pwlib+1
Publicado
2004-02-13
·
Atualizado
2017-10-11
·
CVE-2004-0097
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
PWLib versions prior to 1.6.0
pwlib version 1.4.7
pwlib-devel version 1.4.7
Description
The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of the issue can be carried out remotely, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
Recommendations
For PWLib versions prior to 1.6.0, update to version 1.6.0 or later to resolve the issue.
For pwlib version 1.4.7, consider upgrading to a newer version to mitigate the risk.
For pwlib-devel version 1.4.7, consider upgrading to a newer version to mitigate the risk.
As a temporary workaround, consider restricting access to the H.225 protocol to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Pwlib
Pwlib-Devel