PT-2004-1285 · Xsok · Xsok

Publicado 2004-01-22 · Atualizado 2017-07-11 · CVE-2004-0074

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions xsok version 1.02

Description The issue is related to multiple buffer overflows that allow local users to gain privileges. This can be achieved via a long LANG environment variable, or a long -xsokdir command line argument.

Recommendations For xsok version 1.02, consider restricting the length of the LANG environment variable and the -xsokdir command line argument to prevent buffer overflows until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2004-0074

Produtos afetados

Xsok

Referências · 9

• 🔥 http://securityfocus.com/bid/9352 · Exploit
• 🔥 http://securityfocus.com/bid/9341 · Exploit
• 🔥 https://exploit-db.com/exploits/23510 · Exploit
• 🔥 https://exploit-db.com/exploits/140 · Exploit
• http://marc.info/?l=bugtraq&m=107332542918529&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14906 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14910 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0074 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=107307407027259&w=2 · Nota