PT-2004-1663 · Gopher · Gopherd

Jaguar · Publicado 2004-12-31 · Atualizado 2008-09-05 · CVE-2004-0560

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gopherd version 3.0.3

Description The issue is related to an integer overflow in the gopher daemon. This can be triggered by remote attackers sending crafted content of a certain size, potentially leading to a denial of service and possibly the execution of arbitrary code.

Recommendations For gopherd version 3.0.3, update to a newer version that addresses the integer overflow issue to prevent potential denial of service and arbitrary code execution.

Correção

Identificadores relacionados

CVE-2004-0560

DSA-638-1

Produtos afetados

Gopherd

Referências · 6

• http://debian.org/security/2004/dsa-638 · Aviso do Fabricante
• http://secunia.com/advisories/13855 · Nota
• https://security-tracker.debian.org/tracker/CVE-2004-0560 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0560 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0560 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2004-0560 · Aviso do Fabricante