PT-2004-1025 · Nd · Nd

Publicado 2004-01-08 · Atualizado 2017-07-11 · CVE-2004-0014

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions nd versions 0.8.2 and earlier

Description The issue concerns multiple buffer overflows in the nd WebDAV interface, which can be exploited remotely by web servers to execute arbitrary code via certain long strings. This can lead to a breach of confidentiality, integrity, and availability of protected information.

Recommendations For versions 0.8.2 and earlier, consider disabling the WebDAV interface until a patch is available to prevent remote exploitation. Restrict access to the nd package to minimize the risk of exploitation. Avoid using long strings in the WebDAV interface until the issue is resolved.

Correção

Identificadores relacionados

BDU:2015-03110

CVE-2004-0014

DSA-412

Produtos afetados

Nd

Referências · 13

• https://osv.dev/vulnerability/CVE-2004-0014 · Aviso do Fabricante
• http://debian.org/security/2004/dsa-412 · Aviso do Fabricante
• http://securitytracker.com/id?1008616 · Nota
• http://secunia.com/advisories/10549 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0014 · Aviso do Fabricante
• http://securityfocus.com/bid/9365 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0014 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14141 · Nota
• http://secunia.com/advisories/10550 · Nota
• https://bdu.fstec.ru/vul/2015-03110 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2004-0014 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0014 · Nota de Segurança
• http://debian.org/security/dsa-412 · Nota