PT-2005-1137 · Debian · Debian

Alberto Garcia + 1 · Publicado 2005-04-27 · Atualizado 2008-09-05 · CVE-2004-1342

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CVS versions 1.12 and earlier

Description The issue allows remote attackers to bypass authentication via the pserver access method when using the repouid patch on Debian GNU/Linux.

Recommendations For CVS versions 1.12 and earlier, consider disabling the pserver access method until a patch is available. Restrict access to the repouid patch to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-1342

DSA-715-1

Produtos afetados

Debian

Referências · 5

• http://debian.org/security/2005/dsa-715 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2004-1342 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-1342 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2004-1342 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-1342 · Nota de Segurança