PT-2006-1011 · Smstools · Sms Server Tools

Ulf Harnhammar · Publicado 2006-01-09 · Atualizado 2017-07-20 · CVE-2006-0083

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: SMS Server Tools (smstools) versions 1.14.8 and earlier

Description: The issue is related to a format string vulnerability in the logging code, which could allow local users to execute arbitrary code. Additionally, there are multiple vulnerabilities in the smstools package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited by a local attacker.

Recommendations: For versions 1.14.8 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

BDU:2015-02587

CVE-2006-0083

DSA-930-1

DSA-930-2

Produtos afetados

Sms Server Tools

Referências · 13

• http://secunia.com/advisories/18357 · Aviso do Fabricante
• http://securityfocus.com/bid/16188 · Nota
• http://debian.org/security/dsa-930 · Nota
• https://security-tracker.debian.org/tracker/CVE-2006-0083 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24034 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0083 · Nota de Segurança
• http://secunia.com/advisories/18343 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-0083 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2006-0083 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-02587 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-0083 · Aviso do Fabricante
• http://debian.org/security/2005/dsa-930 · Aviso do Fabricante
• http://osvdb.org/22287 · Nota