PT-2002-1552 · Posadis · Posadis Dns Server

Published 2002-08-12 · Updated 2008-09-05 · CVE-2002-0501

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Posadis DNS server versions prior to m5pre2

Description The issue concerns a format string vulnerability in the log print() function. This vulnerability potentially allows local users and possibly remote attackers to execute arbitrary code via format strings inserted into logging messages.

Recommendations For versions prior to m5pre2, update to version m5pre2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2002-0501

Affected Products

Posadis Dns Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-0501 · Security Note
• http://securityfocus.com/bid/4378 · Vendor Advisory
• http://online.securityfocus.com/archive/1/264450 · Vendor Advisory
• http://iss.net/security_center/static/8653.php · Vendor Advisory
• http://osvdb.org/3516 · Note
• http://sourceforge.net/forum/forum.php?forum_id=165094 · Note