PT-2005-4700 · Kadu · Kadu

Publicado 2005-12-01 · Atualizado 2018-10-19 · CVE-2005-3960

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Kadu versions 0.4.2 through 0.5.0pre

Description The issue allows remote attackers to cause a denial of service, resulting in a crash or generation of traffic, via a malformed message, possibly due to incomplete information.

Recommendations For Kadu versions 0.4.2 through 0.5.0pre, consider restricting the handling of malformed messages to prevent denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2005-3960

Produtos afetados

Kadu

Referências · 7

• http://secunia.com/advisories/17764 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23258 · Nota
• http://vupen.com/english/advisories/2005/2648 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3960 · Nota de Segurança
• http://securityfocus.com/archive/1/417920/100/0/threaded · Nota
• http://osvdb.org/21215 · Nota
• http://securityfocus.com/bid/15620 · Nota