PT-2006-1065 · Tin · Tin

Publicado 2006-02-21 · Atualizado 2017-07-20 · CVE-2006-0804

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: TIN versions 1.8.0 and earlier TIN versions prior to 1.8.2

Description: The issue is related to an off-by-one error that might allow attackers to execute arbitrary code via unknown vectors, triggering a buffer overflow. This could lead to a disruption in confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.

Recommendations: For TIN versions 1.8.0 and earlier, update to version 1.8.2 or later to resolve the issue. For TIN versions prior to 1.8.2, update to version 1.8.2 or later to resolve the issue.

Correção

Identificadores relacionados

BDU:2015-09524

CVE-2006-0804

Produtos afetados

Tin

Referências · 12

• http://security.gentoo.org/glsa/glsa-200611-18.xml · Aviso do Fabricante
• http://securityfocus.com/bid/16728 · Nota
• http://openpkg.org/security/OpenPKG-SA-2006.005-tin.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/0702 · Nota
• https://osv.dev/vulnerability/CVE-2006-0804 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-0804 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2006_05_sr.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-0804 · Nota de Segurança
• http://secunia.com/advisories/19130 · Nota
• https://bdu.fstec.ru/vul/2015-09524 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2006-0804 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24841 · Nota