PT-2002-2503 · Delegate · Delegate

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-1781

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DeleGate versions 7.7.0 through 7.8.1

Description The issue allows remote attackers to execute arbitrary code due to multiple buffer overflows. This can be demonstrated by sending a long USER command to the POP proxy.

Recommendations For DeleGate versions 7.7.0 through 7.8.1, consider restricting access to the POP proxy until a patch is available. As a temporary workaround, limit the length of the USER command to prevent buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1781

Affected Products

Delegate

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2002-1781 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-02/0051.html · Vendor Advisory
• http://globalintersec.com/adv/delegate-2002012101.txt · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8114 · Note
• http://securityfocus.com/bid/4055 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1781 · Note
• http://online.securityfocus.com/archive/1/256117 · Note