PT-2001-2341 · Daydream · Daydream Bbs

Published 2001-12-30 · Updated 2008-09-05 · CVE-2001-1207

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DayDream BBS versions 2.9 through 2.13

Description The issue concerns buffer overflows that could allow remote attackers to possibly execute arbitrary code. This is achieved via specific control codes, including ~#MC, ~#TF, and ~#RA.

Recommendations For DayDream BBS versions 2.9 through 2.13, consider disabling the control codes ~#MC, ~#TF, and ~#RA as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-1207

Affected Products

Daydream Bbs

References · 5

• 🔥 http://securityfocus.com/archive/1/247708 · Exploit
• http://securityfocus.com/bid/3757 · Vendor Advisory
• http://iss.net/security_center/static/7755.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1207 · Security Note
• http://cs.uku.fi/~hlyytine/daydream-2.11/ChangeLog · Note