PT-2004-2964 · Leafnode · Leafnode

Publicado 2004-12-31 · Atualizado 2017-07-12 · CVE-2004-2068

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions leafnode versions 1.9.47 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a process hang. This is achieved by sending an empty NNTP news article with missing mandatory headers.

Recommendations For leafnode versions 1.9.47 and earlier, update to a version later than 1.9.47 to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-2068

Produtos afetados

Leafnode

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/14189 · Nota
• http://secunia.com/advisories/10590 · Correção
• http://leafnode.sourceforge.net/leafnode-SA-2004-01.txt · Correção
• http://derkeiler.com/Mailing-Lists/VulnWatch/2004-01/0009.html · Nota
• http://osvdb.org/3441 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2068 · Nota de Segurança