PT-2007-1010 · Tinymux · Tinymux

Duskwave · Publicado 2007-03-24 · Atualizado 2013-07-23 · CVE-2007-1655

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: TinyMUX versions prior to 20070126

Description: The issue is related to a buffer overflow in the fun ladd function, which might allow remote attackers to cause a denial of service or possibly execute arbitrary code. Additionally, there are multiple vulnerabilities in the TinyMUX package that can lead to breaches of confidentiality, integrity, and availability of protected information, and these can be exploited remotely.

Recommendations: For versions prior to 20070126, update to a version released after 20070126 to resolve the issue. As a temporary workaround, consider restricting access to the fun ladd function in funmath.cpp to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-01990

CVE-2007-1655

DSA-1317-1

Produtos afetados

Tinymux

Referências · 15

• http://tinymux.org/changes.txt · Nota
• http://osvdb.org/34686 · Nota
• http://secunia.com/advisories/24733 · Nota
• https://bdu.fstec.ru/vul/2015-01990 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2007-1655 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1655 · Nota de Segurança
• http://securityfocus.com/bid/23292 · Nota
• http://code.google.com/p/tinymux/issues/detail?id=282&can=2&q= · Nota
• https://osv.dev/vulnerability/CVE-2007-1655 · Aviso do Fabricante
• http://secunia.com/advisories/25784 · Nota
• http://debian.org/security/2007/dsa-1317 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-1655 · Nota de Segurança
• http://debian.org/security/dsa-1317 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-1655 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/1213 · Nota