PT-2004-1039 · Xboing · Xboing

Publicado 2004-03-25 · Atualizado 2017-07-11 · CVE-2004-0149

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions xboing versions prior to 2.4

Description The issue concerns multiple buffer overflows that can be exploited by local users to gain privileges. Additionally, there are multiple vulnerabilities in the xboing package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited by a local attacker.

Recommendations For versions prior to 2.4, update to version 2.4 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Exploit

Correção

Identificadores relacionados

BDU:2015-03666

CVE-2004-0149

DSA-451

Produtos afetados

Xboing

Referências · 7

• 🔥 http://securityfocus.com/bid/9764 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0149 · Nota de Segurança
• http://debian.org/security/2004/dsa-451 · Correção, Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-03666 · Nota de Segurança
• http://debian.org/security/dsa-451 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0149 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15347 · Nota