PT-2004-1074 · Unknown+1 · Libuser-Devel+1

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2392

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions libuser versions 0.32 through 0.51.7 libuser-devel version 0.32

Description The issue allows attackers to cause a denial of service, potentially leading to a crash or disk consumption, via unknown attack vectors related to read failures and other bugs. This can be exploited remotely.

Recommendations For libuser versions 0.32 through 0.51.7, consider restricting access to the service until a patch is available. For libuser-devel version 0.32, restrict usage to minimize the risk of exploitation. As a temporary workaround, consider disabling the service related to libuser until a patch is available.

Correção

Identificadores relacionados

BDU:2015-07037

BDU:2015-07038

CVE-2004-2392

Produtos afetados

Libuser

Libuser-Devel

Referências · 10

• http://securitytracker.com/id?1010187 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2392 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDKSA-2004:044 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16188 · Nota
• https://bdu.fstec.ru/vul/2015-07038 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2005-770.html · Aviso do Fabricante
• http://securityfocus.com/bid/10368 · Correção
• https://bdu.fstec.ru/vul/2015-07037 · Nota de Segurança
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120168 · Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2005-770.html · Nota