PT-2007-2825 · Pennmush · Pennmush

Publicado 2007-03-13 · Atualizado 2011-03-08 · CVE-2007-1431

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions PennMUSH versions 1.8.2 through 1.8.2p3 and 1.8.3 through 1.8.3p1, but not including 1.8.3p1 and 1.8.2p3, can be simplified to: PennMUSH versions 1.8.2 through 1.8.2p2 and 1.8.3 However, since 1.8.3p1 is the fixed version for 1.8.3 and 1.8.2p3 is the fixed version for 1.8.2, the correct representation is: PennMUSH versions 1.8.2 through 1.8.2p2 and 1.8.3

Description The issue allows attackers to cause a denial of service, resulting in a crash, related to the speak and buy functions.

Recommendations For PennMUSH version 1.8.2, update to version 1.8.2p3. For PennMUSH version 1.8.3, update to version 1.8.3p1.

Correção

Identificadores relacionados

CVE-2007-1431

Produtos afetados

Pennmush

Referências · 6

• http://vupen.com/english/advisories/2007/0921 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1431 · Nota de Segurança
• http://securityfocus.com/bid/22935 · Nota
• http://secunia.com/advisories/24504 · Aviso do Fabricante
• http://pennmush.org/archives/pennmush-announce/2007/000137.html · Correção
• http://osvdb.org/34005 · Nota