PT-2001-2675 · Debian+1 · Debian+1

Published 1970-01-01 · Updated 2017-10-10 · CVE-2001-1027

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WindowMaker versions 0.64 and earlier libdockapp-dev (affected versions not specified) libwraster1 (affected versions not specified) libwraster1-dev (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code via a long window title. Multiple vulnerabilities in the libdockapp-dev, libwraster1, and libwraster1-dev packages of the Debian GNU/Linux operating system can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

Recommendations For WindowMaker versions 0.64 and earlier, update to a version later than 0.64 to resolve the issue. For libdockapp-dev, libwraster1, and libwraster1-dev, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-02540

BDU:2015-02541

BDU:2015-02542

CVE-2001-1027

Affected Products

Debian

Windowmaker

References · 13

• http://linux-mandrake.com/en/security/2001/MDKSA-2001-074.php3 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02541 · Security Note
• http://windowmaker.org/src/ChangeLog · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1027 · Security Note
• http://securityfocus.com/bid/3177 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02542 · Security Note
• https://bdu.fstec.ru/vul/2015-02540 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1027 · Security Note
• http://debian.org/security/2001/dsa-074 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000411 · Vendor Advisory
• http://novell.com/linux/security/advisories/2001_032_wmaker_txt.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6969 · Note
• http://debian.org/security/dsa-074 · Note