PT-2001-1061 · Licq · Licq

Published 2001-02-28 · Updated 2017-10-10 · CVE-2001-0440

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions licq versions 1.0.2 and earlier licq version 1.0.2

Description The issue concerns multiple vulnerabilities in the licq package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. A buffer overflow in logging functions allows remote attackers to cause a denial of service and possibly execute arbitrary commands.

Recommendations For licq versions 1.0.2 and earlier, update to version 1.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the logging functions until a patch is available.

Exploit

Fix

Related Identifiers

BDU:2015-08155

CVE-2001-0440

Affected Products

Licq

References · 11

• 🔥 https://exploit-db.com/exploits/20646 · Exploit
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000389 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0440 · Security Note
• http://archives.neohapsis.com/archives/freebsd/2001-04/0607.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2001-023.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2001-022.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08155 · Security Note
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-032.php3 · Vendor Advisory
• http://osvdb.org/5601 · Note
• https://rhn.redhat.com/errata/RHSA-2001-022.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6645 · Note