PT-2003-2040 · Thomson · Thomson Tcw690+2

Murdok · Published 2003-12-31 · Updated 2017-07-11 · CVE-2003-1085

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Thomson TWC305 version ST42.03.0a Thomson TWC315 version ST42.03.0a Thomson TCW690 version ST42.03.0a

Description The issue allows remote attackers to cause unstable service, possibly due to a buffer overflow, by sending a long GET request to the HTTP server.

Recommendations For Thomson TWC305 version ST42.03.0a, restrict access to the HTTP server until a fix is available. For Thomson TWC315 version ST42.03.0a, limit the length of incoming GET requests to prevent unstable service. For Thomson TCW690 version ST42.03.0a, consider disabling the HTTP server as a temporary workaround until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2003-1085

Affected Products

Thomson Tcw690

Thomson Twc305

Thomson Twc315

References · 12

• 🔥 http://secunia.com/advisories/10286 · Exploit
• 🔥 https://exploit-db.com/exploits/25124 · Exploit
• 🔥 http://securityfocus.com/bid/9091 · Exploit
• 🔥 http://secunia.com/advisories/14353 · Exploit
• 🔥 http://shellsec.net/leer_advisory.php?id=2 · Exploit
• 🔥 http://securityfocus.com/archive/1/345414 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/014062.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1085 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13815 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/014068.html · Note
• http://marc.info/?l=bugtraq&m=110888093214678&w=2 · Note
• http://marc.info/?l=full-disclosure&m=110880725322192&w=2 · Note