Tinymux · Tinymux · CVE-2007-1655
Name of the Vulnerable Software and Affected Versions:
TinyMUX versions prior to 20070126
Description:
The issue is related to a buffer overflow in the `fun ladd` function, which might allow remote attackers to cause a denial of service or possibly execute arbitrary code. Additionally, there are multiple vulnerabilities in the TinyMUX package that can lead to breaches of confidentiality, integrity, and availability of protected information, and these can be exploited remotely.
Recommendations:
For versions prior to 20070126, update to a version released after 20070126 to resolve the issue. As a temporary workaround, consider restricting access to the `fun ladd` function in funmath.cpp to minimize the risk of exploitation.