PT-2007-4809 · Bbs100 · Bbs100

Publicado 2007-07-03 · Atualizado 2017-07-29 · CVE-2007-3551

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:N/AC:L/Au:M/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions bbs100 versions prior to 3.2

Description The issue allows remote attackers to cause a denial of service by attempting to login as the Guest user when another Guest user is already logged in. This is possibly related to the state login prompt function in state login.c.

Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue. As a temporary workaround, consider restricting concurrent Guest user logins to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-3551

Produtos afetados

Bbs100

Referências · 6

• http://securityfocus.com/bid/24747 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35244 · Nota
• http://osvdb.org/37805 · Nota
• http://secunia.com/advisories/25924 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-3551 · Nota de Segurança
• http://ka.sara.nl/home/walter//bbs100/ChangeLog.txt · Correção