PT-2005-3685 · Frox · Frox

Publicado 2005-09-07 · Atualizado 2008-09-05 · CVE-2005-2808

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions frox versions 0.7.16 through 0.7.17

Description The issue is related to the improper parsing of certain Deny ACLs, which could allow attackers to bypass intended restrictions and access blocked hosts.

Recommendations For versions 0.7.16 and 0.7.17, consider restricting access to blocked hosts until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-2808

Produtos afetados

Frox

Referências · 5

• http://secunia.com/advisories/14182 · Nota
• http://securitytracker.com/id?1013089 · Nota
• http://osvdb.org/13615 · Nota
• http://sourceforge.net/mailarchive/forum.php?thread_id=6492850&forum_id=1822 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-2808 · Nota de Segurança