PT-2004-3538 · Freezex · Freezex

Publicado 2004-12-31 · Atualizado 2017-07-20 · CVE-2004-2648

Positive Technologies (AI Summary)

CVSS v2.0

1.0

Baixa

Vetor base

AV:L/AC:H/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreezeX version 1.00.100.0666

Description The issue allows local users with administrator privileges to cause a denial of service in the FreezeX application. This can be achieved by overwriting the db.fzx file.

Recommendations For FreezeX version 1.00.100.0666, consider restricting access to the db.fzx file to prevent unauthorized overwrites until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2004-2648

Produtos afetados

Freezex

Referências · 5

• 🔥 http://securitytracker.com/id?1012699 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0458.html · Exploit
• http://osvdb.org/12659 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2648 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18643 · Nota