PT-2004-1013 · L2Tpd · L2Tpd

Published 2004-07-13 · Updated 2017-07-11 · CVE-2004-0649

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions l2tpd (affected versions not specified)

Description The issue is related to a buffer overflow in the write packet function in control.c for l2tpd, which may allow remote attackers to execute arbitrary code. Additionally, there are multiple vulnerabilities in the l2tpd package that can lead to breaches of confidentiality, integrity, and availability of protected information, and these can be exploited remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-02586

CVE-2004-0649

DSA-530

Affected Products

L2Tpd

References · 8

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0649 · Security Note
• https://bdu.fstec.ru/vul/2015-02586 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0649 · Security Note
• http://debian.org/security/2004/dsa-530 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200407-17.xml · Vendor Advisory
• http://marc.info/?l=bugtraq&m=108640917925735&w=2 · Note
• http://debian.org/security/dsa-530 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16326 · Note