PT-2005-2003 · Honeywell · Rumba

Bahaa Naamneh · Publicado 2005-04-05 · Atualizado 2017-07-11 · CVE-2005-0979

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RUMBA versions 7.3 and earlier

Description The issue is related to multiple buffer overflows that can be triggered by remote attackers using crafted values in a profile file. This can lead to a denial of service and potentially allow the execution of arbitrary code. An example of such exploitation is through the use of a long SysName field.

Recommendations For versions 7.3 and earlier, consider applying configuration changes to restrict access to profile files until a fix is available. As a temporary workaround, restrict the length of the SysName field to prevent buffer overflows.

Exploit

Correção

Identificadores relacionados

CVE-2005-0979

Produtos afetados

Rumba

Referências · 5

• 🔥 https://exploit-db.com/exploits/25326 · Exploit
• http://marc.info/?l=bugtraq&m=111238364916500&w=2 · Nota
• http://securityfocus.com/bid/12965 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0979 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19934 · Nota