PT-2002-2678 · Pen · Pen

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1957

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pen versions 0.9.1 through 0.9.2

Description The issue is related to a buffer overflow in the netlog function, located in the pen.c file. This allows remote attackers to execute arbitrary commands by sending malformed log messages.

Recommendations For versions 0.9.1 and 0.9.2, update to a version that fixes the buffer overflow issue in the netlog function.

Fix

Related Identifiers

CVE-2002-1957

Affected Products

Pen

References · 4

• http://securityfocus.com/bid/5152 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-1957 · Security Note
• http://iss.net/security_center/static/9505.php · Patch
• http://siag.nu/pen/news-0.9.3.shtml · Note