PT-2004-2667 · Haht · Hahtsite Scenario Server

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1763

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HAHTsite Scenario Server version 5.1 Patch 06 (build 91)

Description The issue is related to a buffer overflow in hsrun.exe, which can be triggered by a long project name. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code.

Recommendations For HAHTsite Scenario Server version 5.1 Patch 06 (build 91), consider restricting the length of project names to prevent the buffer overflow until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2004-1763

Produtos afetados

Hahtsite Scenario Server

Referências · 7

• 🔥 http://secunia.com/advisories/11288 · Exploit
• http://marc.info/?l=full-disclosure&m=108091662105032&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1763 · Nota de Segurança
• http://kb.cert.org/vuls/id/705958 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15717 · Nota
• http://securityfocus.com/bid/10033 · Correção
• http://protego.dk/advisories/200405.html · Nota