PT-2005-1014 · Debian · Osh

Solar Eclipse · Publicado 2005-11-20 · Atualizado 2011-03-08 · CVE-2005-3533

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OSH versions prior to 1.7-15

Description The issue concerns multiple vulnerabilities in the OSH package of the Debian GNU/Linux operating system. These vulnerabilities can be exploited by a local attacker, potentially leading to breaches of confidentiality, integrity, and availability of protected information. A specific vulnerability involves a buffer overflow in OSH, which can be triggered by a local user providing a long current working directory and filename, allowing the execution of arbitrary code.

Recommendations For OSH versions prior to 1.7-15, update to version 1.7-15 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive directories and files to minimize the risk of exploitation. Avoid using excessively long filenames and directory paths in the affected OSH versions until the issue is resolved.

Exploit

Correção

Identificadores relacionados

BDU:2015-02398

CVE-2005-3533

DSA-918-1

Produtos afetados

Osh

Referências · 12

• 🔥 https://exploit-db.com/exploits/788 · Exploit
• 🔥 https://exploit-db.com/exploits/1154 · Exploit
• http://debian.org/security/dsa-918 · Nota
• http://debian.org/security/2005/dsa-918 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2812 · Nota
• http://osvdb.org/21576 · Nota
• http://securityfocus.com/bid/12455 · Nota
• http://secunia.com/advisories/17967 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3346 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-02398 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3533 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2005-3533 · Nota de Segurança