PT-2001-1008 · Debian · Analog

Published 2001-04-17 · Updated 2017-10-10 · CVE-2001-0301

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Analog versions prior to 4.16

Description The issue concerns multiple vulnerabilities in the Analog package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by constructing large strings using the ALIAS command.

Recommendations For Analog versions prior to 4.16, update to version 4.16 or later to resolve the issue. As a temporary workaround, consider restricting access to the ALIAS command to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-02865

CVE-2001-0301

Affected Products

Analog

References · 11

• http://debian.org/security/2001/dsa-033 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2001-02/0264.html · Vendor Advisory
• http://archives.neohapsis.com/archives/linux/redhat/2001-q1/0056.html · Vendor Advisory
• http://analog.cx/security2.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02865 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0301 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2001-0301 · Security Note
• http://securityfocus.com/bid/2377 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6105 · Note
• http://debian.org/security/dsa-033 · Note
• http://osvdb.org/1762 · Note