PT-2004-1341 · Ppp · Pppd

Publicado 2004-03-15 · Atualizado 2017-10-10 · CVE-2004-0165

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions pppd versions 2.4.0 and earlier

Description A format string issue in the Point-to-Point Protocol (PPP) daemon allows remote attackers to read arbitrary process data, including authentication credentials for PAP or CHAP, potentially gaining privileges.

Recommendations For versions 2.4.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2004-0165

Produtos afetados

Pppd

Referências · 7

• 🔥 http://atstake.com/research/advisories/2004/a022304-1.txt · Exploit
• http://kb.cert.org/vuls/id/841742 · Nota
• http://securityfocus.com/bid/9730 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15297 · Nota
• http://osvdb.org/6822 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0165 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html · Aviso do Fabricante