PT-2004-3707 · Fte+1 · Fte+6
Steve Kemp
·
Publicado
1970-01-01
·
Atualizado
2017-07-11
·
CVE-2003-0648
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
vfte versions prior to 0.50
fte-docs (affected versions not specified)
fte (affected versions not specified)
fte-xwindow (affected versions not specified)
fte-console (affected versions not specified)
fte-terminal (affected versions not specified)
Description
The issue involves multiple buffer overflows in vfte, based on FTE, which can be exploited by local users to execute arbitrary code. Additionally, there are multiple vulnerabilities in the fte, fte-docs, fte-xwindow, fte-console, and fte-terminal packages of the Debian GNU/Linux operating system. These vulnerabilities can lead to a breach of confidentiality, integrity, and availability of protected information and can be exploited remotely.
Recommendations
For vfte versions prior to 0.50, update to version 0.50 or later to resolve the buffer overflow issue.
For fte-docs, fte, fte-xwindow, fte-console, and fte-terminal, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Fte
Fte-Console
Fte-Docs
Fte-Terminal
Fte-Xwindow
Vfte