PT-2005-2392 · Arpus · Ce/Ceterm

Publicado 2005-05-02 · Atualizado 2018-08-13 · CVE-2005-1395

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Ce/Ceterm (aka ARPUS/Ce) versions 2.5.4 and earlier

Description: A buffer overflow issue may allow local users to gain privileges. This can be achieved via a long XAPPLRESLANGPATH or XAPPLRESDIR environment variable, or a command line argument.

Recommendations: For Ce/Ceterm (aka ARPUS/Ce) versions 2.5.4 and earlier, consider restricting access to environment variables XAPPLRESLANGPATH and XAPPLRESDIR to minimize the risk of exploitation. Additionally, limit the length of command line arguments to prevent buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-1395

Produtos afetados

Ce/Ceterm

Referências · 5

• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033705.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1395 · Nota de Segurança
• http://securitytracker.com/id?1013855 · Nota
• http://secunia.com/advisories/15197 · Correção
• http://digitalmunition.com/DMA%5B2005-0501a%5D.txt · Nota