PT-2005-4533 · Ipupdate · Ipupdate

Publicado 2005-11-23 · Atualizado 2011-03-08 · CVE-2005-3780

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IPUpdate version 1.1

Description The issue is related to multiple buffer overflows that could allow attackers to execute arbitrary code. This can occur via the memmcat function in the memm module or through certain TSIG format records.

Recommendations For IPUpdate version 1.1, update to a version that fixes the buffer overflow issues in the memm module and handles TSIG format records securely.

Correção

Identificadores relacionados

CVE-2005-3780

Produtos afetados

Ipupdate

Referências · 7

• http://sourceforge.net/project/shownotes.php?release_id=372666 · Nota
• http://vupen.com/english/advisories/2005/2523 · Nota
• http://osvdb.org/21037 · Nota
• http://securityfocus.com/bid/15534 · Aviso do Fabricante
• http://secunia.com/advisories/17681 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3780 · Nota de Segurança
• http://osvdb.org/21036 · Nota