PT-2001-1060 · Licq · Licq

Published 2001-02-28 · Updated 2017-10-10 · CVE-2001-0439

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions licq versions 1.0.2 and earlier licq before 1.0.3

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a URL, potentially leading to a breach of confidentiality, integrity, and availability of protected information.

Recommendations For licq version 1.0.2, update to version 1.0.3 or later to resolve the issue. For licq versions prior to 1.0.3, update to version 1.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to URLs that may contain shell metacharacters until a patch is available.

Fix

Related Identifiers

BDU:2015-08155

CVE-2001-0439

Affected Products

Licq

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2001-0439 · Security Note
• http://archives.neohapsis.com/archives/freebsd/2001-04/0607.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2001-023.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2001-022.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08155 · Security Note
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-032.php3 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6261 · Note
• http://osvdb.org/5641 · Note
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000389 · Patch, Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2001-022.html · Note