PT-2011-4808 · Csworks · Csworks

Publicado 2011-11-03 · Atualizado 2017-08-29 · CVE-2011-3996

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions CSWorks versions prior to 2.0.4115.1

Description The issue allows remote attackers to cause a denial of service, resulting in a service crash, via crafted TCP packets. This is related to the LiveData Service in CSWorks.

Recommendations For versions prior to 2.0.4115.1, update to version 2.0.4115.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2011-3996

Produtos afetados

Csworks

Referências · 8

• http://secunia.com/advisories/46625 · Aviso do Fabricante
• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000095 · Nota
• http://controlsystemworks.com/blogengine/post/CSWorks-2041151-security-release.aspx · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-3996 · Nota de Segurança
• http://controlsystemworks.com/ProductHistory.aspx · Nota
• http://securityfocus.com/bid/50458 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71079 · Nota
• http://jvn.jp/en/jp/JVN98649286/index.html · Nota