PT-2004-1041 · Debian · Rlpr

Publicado 2004-06-30 · Atualizado 2017-07-11 · CVE-2004-0454

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions rlpr versions 2.04

Description The issue concerns multiple vulnerabilities in the rlpr package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. A buffer overflow in the msg function for the rlpr daemon (rlprd) allows local users to execute arbitrary code.

Recommendations For version 2.04, consider restricting access to the rlpr daemon to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

BDU:2015-04073

CVE-2004-0454

DSA-524

Produtos afetados

Rlpr

Referências · 11

• 🔥 http://securityfocus.com/bid/10578 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2004-0454 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-04073 · Nota de Segurança
• http://debian.org/security/2004/dsa-524 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0454 · Aviso do Fabricante
• http://debian.org/security/dsa-524 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0393 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16454 · Nota
• https://osv.dev/vulnerability/CVE-2004-0454 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0454 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2004-0454 · Nota de Segurança