PT-2006-6001 · Microsoft · Dynamics Gp

Publicado 2006-12-31 · Atualizado 2017-07-20 · CVE-2006-5266

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics GP versions 9.0 and earlier

Description The issue allows remote attackers to execute arbitrary code via crafted messages to specific components. This can be achieved by sending a crafted Distributed Process Manager (DPM) message to the DPM component, or by sending a long string or long IP address in a Distributed Process Server (DPS) message to either the DPM or DPS component.

Recommendations For Microsoft Dynamics GP versions 9.0 and earlier, consider restricting access to the DPM and DPS components until a fix is available. As a temporary workaround, avoid using long strings or IP addresses in DPS messages to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-5266

Produtos afetados

Dynamics Gp

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-5266 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25840 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25841 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25842 · Nota
• http://securityfocus.com/bid/29991 · Nota