PT-2004-2038 · Freebsd · Freebsd

Publicado 2004-11-24 · Atualizado 2017-07-11 · CVE-2004-1053

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: FreeBSD versions 4.1 through 5.3

Description: The issue is related to an integer overflow in the fetch function, which can be exploited by remote malicious servers. This exploitation can occur via certain HTTP headers in an HTTP response, leading to a buffer overflow and potentially allowing the execution of arbitrary code.

Recommendations: For FreeBSD versions 4.1 through 5.3, update to a version that includes a fix for the integer overflow in the fetch function to prevent remote code execution.

Correção

Identificadores relacionados

CVE-2004-1053

Produtos afetados

Freebsd

Referências · 4

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:16.fetch.asc · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18160 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1053 · Nota de Segurança
• http://securityfocus.com/bid/11702 · Aviso do Fabricante