PT-2005-2710 · Ibsh · Iron Bars Shell

Publicado 2005-05-24 · Atualizado 2008-09-05 · CVE-2005-1738

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Iron Bars SHell (ibsh) versions prior to 0.3d

Description The issue allows users to access files outside the home directory and possibly execute arbitrary code via certain inputs that are not properly handled in a syslog call. This is due to a format string vulnerability in the logPrintBadfile function in delbadfiles.c.

Recommendations For versions prior to 0.3d, update to version 0.3d or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-1738

Produtos afetados

Iron Bars Shell

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-1738 · Nota de Segurança
• http://secunia.com/advisories/15473 · Aviso do Fabricante
• http://securityfocus.com/bid/13720 · Correção
• http://sourceforge.net/project/shownotes.php?release_id=329340 · Correção