PT-2005-4731 · Sobexsrv · Sobexsrv

Publicado 2005-12-05 · Atualizado 2018-10-19 · CVE-2005-3995

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sobexsrv versions prior to 1.0.0-pre4

Description The issue is related to a format string vulnerability in the dosyslog function within the OBEX server. This vulnerability can be exploited when the syslog function is enabled, allowing remote attackers to execute arbitrary code by including format string specifiers in file name arguments to OBEX commands.

Recommendations For Sobexsrv versions prior to 1.0.0-pre4, consider disabling the syslog function until a patch is available. Restrict access to the OBEX server to minimize the risk of exploitation. Avoid using the dosyslog function in the OBEX server until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2005-3995

Produtos afetados

Sobexsrv

Referências · 6

• 🔥 http://digitalmunition.com/DMA%5B2005-1202a%5D.txt · Exploit
• 🔥 https://exploit-db.com/exploits/1355 · Exploit
• http://vupen.com/english/advisories/2005/2711 · Nota
• http://securityfocus.com/archive/1/418515/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3995 · Nota de Segurança
• http://securityfocus.com/bid/15692 · Correção