PT-2010-4441 · Wind River · Vxworks

Publicado 2010-08-04 · Atualizado 2010-08-05 · CVE-2010-2967

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions prior to 6.9

Description The issue is related to the loginDefaultEncrypt algorithm in loginLib, which does not properly support a large set of distinct possible passwords. This makes it easier for remote attackers to obtain access via a telnet, rlogin, or FTP session.

Recommendations For versions prior to 6.9, update to version 6.9 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2010-2967

Produtos afetados

Vxworks

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2010-2967 · Nota de Segurança
• http://blog.metasploit.com/2010/08/vxworks-vulnerabilities.html · Nota
• https://support.windriver.com/olsPortal/faces/maintenance/downloadDetails.jspx?contentId=033709 · Nota
• http://kb.cert.org/vuls/id/840249 · Nota
• http://kb.cert.org/vuls/id/MAPG-863QH9 · Nota