PT-2006-1913 · South River · Webdrive

Publicado 2006-02-23 · Atualizado 2018-10-18 · CVE-2006-0867

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions South River WebDrive versions 6.08 build 1131 through 8

Description The issue is related to a buffer overflow that can be triggered by a long string in the name entry field, allowing remote attackers to cause a denial of service, which results in an application crash and persistent erratic behavior.

Recommendations For versions 6.08 build 1131 through 8, avoid using long strings in the name entry field to prevent the buffer overflow until a fix is available. As a temporary workaround, consider restricting input length in the name field to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-0867

Produtos afetados

Webdrive

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/24903 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0867 · Nota de Segurança
• http://securityfocus.com/archive/1/425785/100/0/threaded · Nota