PT-2001-2671 · Gnome+1 · Libgtop1+3

Published 1970-01-01 · Updated 2016-10-18 · CVE-2001-0928

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions libgtop-daemon versions 1.0.13 and earlier libgtop-dev (affected versions not specified) libgtop1 (affected versions not specified)

Description The issue involves multiple vulnerabilities in the libgtop-daemon package of the Debian GNU/Linux operating system, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. A buffer overflow in the permitted function of the GNOME gtop daemon (libgtop daemon) may allow remote attackers to execute arbitrary code via long authentication data.

Recommendations For libgtop-daemon versions 1.0.13 and earlier: Update to a version later than 1.0.13 to resolve the issue. For libgtop-dev: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For libgtop1: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-01331

BDU:2015-01332

BDU:2015-01333

CVE-2001-0928

DSA-301

Affected Products

Debian

Libgtop-Daemon

Libgtop-Dev

Libgtop1

References · 11

• http://debian.org/security/2002/dsa-098 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01333 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0928 · Security Note
• https://bdu.fstec.ru/vul/2015-01332 · Security Note
• https://bdu.fstec.ru/vul/2015-01331 · Security Note
• http://debian.org/security/2003/dsa-301 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0928 · Security Note
• http://debian.org/security/dsa-301 · Note
• http://kb.cert.org/vuls/id/705771 · Note
• http://securityfocus.com/bid/3594 · Note
• http://marc.info/?l=bugtraq&m=100699007010203&w=2 · Note