PT-2004-1860 · Posadis+2 · Posadis+3

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-0789

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Posadis using Poslib versions 1.0.2-1 and earlier Axis Network products versions before 3.13 Men & Mice Suite versions 2.2x before 2.2.3 Men & Mice Suite versions 3.5.x before 3.5.2

Description The issue allows remote attackers to cause a denial of service by triggering a communications loop. This can be achieved via DNS query packets with localhost as a spoofed source address, or a response packet that triggers another response packet, leading to CPU and network bandwidth consumption.

Recommendations For Posadis using Poslib versions 1.0.2-1 and earlier, update to a version later than 1.0.2-1. For Axis Network products versions before 3.13, update to firmware 3.13 or later. For Men & Mice Suite versions 2.2x before 2.2.3, update to version 2.2.3 or later. For Men & Mice Suite versions 3.5.x before 3.5.2, update to version 3.5.2 or later.

Correção

Identificadores relacionados

CVE-2004-0789

Produtos afetados

Axis Network

Men & Mice Suite

Posadis

Poslib

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2004-0789 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0789 · Nota
• http://securityfocus.com/bid/11642 · Correção
• http://niscc.gov.uk/niscc/docs/re-20041109-00957.pdf · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17997 · Nota
• http://securitytracker.com/id?1012157 · Correção
• http://niscc.gov.uk/niscc/docs/al-20041130-00862.html?lang=en · Aviso do Fabricante
• http://posadis.org/advisories/pos_adv_006.txt · Aviso do Fabricante
• http://secunia.com/advisories/13145 · Correção