PT-2004-3712 · Debian · Fsp

Publicado 1970-01-01 · Atualizado 2017-10-10 · CVE-2004-0011

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions fsp versions prior to 2.81.b18

Description The issue allows remote users to execute arbitrary code due to a buffer overflow. Multiple vulnerabilities in the fsp package of the Debian GNU/Linux operating system can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

Recommendations For versions prior to 2.81.b18, update to version 2.81.b18 or later to resolve the issue. As a temporary workaround, consider restricting access to the fsp package to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-03108

BDU:2015-03109

CVE-2004-0011

DSA-416

Produtos afetados

Fsp

Referências · 10

• http://debian.org/security/dsa-416 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14155 · Nota
• http://ciac.org/ciac/bulletins/o-048.shtml · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0011 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2004-0011 · Nota de Segurança
• http://securityfocus.com/bid/9377 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-03109 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1022 · Nota de Segurança
• http://debian.org/security/2004/dsa-416 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-03108 · Nota de Segurança