PT-2007-5720 · Alpass · Alpass

Publicado

2007-08-28

·

Atualizado

2017-11-21

·

CVE-2007-4549

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions ALPass versions 2.7 through 3.02
Description The issue is related to multiple buffer overflows that can be triggered by user-assisted remote attacks. This can occur when an ALPass DB (APW) file contains either a long file-key or a "Site Information and Folder entry" with a ciphertext length value significantly larger than the plaintext length value, allowing attackers to execute arbitrary code.
Recommendations For ALPass versions 2.7 through 3.02, consider avoiding the use of ALPass DB (APW) files that may trigger the buffer overflow until a fix is available. As a temporary workaround, restrict the handling of files with potentially malicious content to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-4549

Produtos afetados

Alpass