PT-2005-1859 · Xzabite · Xzabite Dyndnsupdate

Toby Dickenson · Publicado 2005-03-22 · Atualizado 2008-09-05 · CVE-2005-0830

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xzabite DYNDNSUpdate versions 0.6.15 and earlier

Description The issue is related to multiple buffer overflows, including the ipcheck function in dyndnsupdate.c. This allows remote attackers who spoof a dyndns.org server to execute arbitrary code via unknown vectors.

Recommendations For Xzabite DYNDNSUpdate versions 0.6.15 and earlier, consider disabling the ipcheck function in dyndnsupdate.c as a temporary workaround until a patch is available. Restrict access to the dyndns.org server to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-0830

Produtos afetados

Xzabite Dyndnsupdate

Referências · 4

• http://security.gentoo.org/glsa/glsa-200503-27.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0830 · Nota de Segurança
• http://secunia.com/advisories/14663 · Aviso do Fabricante
• http://bugs.gentoo.org/show_bug.cgi?id=84659 · Aviso do Fabricante