PT-2014-6504 · Srvx · Srvx

Publicado 2014-09-05 · Atualizado 2014-09-08 · CVE-2014-5508

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions srvx version 1.3.1

Description The issue is related to multiple integer overflows in the HelpServ module, which can be exploited by remote authenticated IRCops or HelpServ bot managers. This can cause a denial of service in the form of an infinite loop. The exploitation is possible via a large value in the EmptyInterval parameter or certain other interval configurations.

Recommendations For srvx version 1.3.1, consider restricting access to the HelpServ module until a patch is available. As a temporary workaround, avoid using large values in the EmptyInterval parameter to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2014-5508

Produtos afetados

Srvx

Referências · 4

• 🔥 http://openwall.com/lists/oss-security/2014/08/28/5 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2014/08/30/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5508 · Nota de Segurança
• http://securityfocus.com/bid/69454 · Nota