PT-2006-1256 · Cray · Unicos

Publicado 2006-01-11 · Atualizado 2017-07-20 · CVE-2006-0178

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UNICOS version 9.0.2.2

Description A format string issue exists in the /bin/ftp program, potentially allowing local users to have an unknown impact via format string specifiers in the "quote" command. The program is not setuid and not normally called from remote programs, which may limit the attack vector.

Recommendations For UNICOS version 9.0.2.2, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2006-0178

Produtos afetados

Unicos

Referências · 4

• http://securityfocus.com/bid/16205 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0343.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0178 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24277 · Nota