PT-2004-1014 · Debian · Jitterbug

Published 2004-02-03 · Updated 2017-10-10 · CVE-2004-0028

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions jitterbug version 1.6.2

Description The issue is related to improper input sanitization, which allows remote authenticated users to execute arbitrary commands. Multiple vulnerabilities in the jitterbug package of the Debian GNU/Linux operating system can lead to breaches of confidentiality, integrity, and availability of protected information, and these vulnerabilities can be exploited remotely.

Recommendations For jitterbug version 1.6.2, update to a version that properly sanitizes inputs to prevent arbitrary command execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-02667

CVE-2004-0028

DSA-420

Affected Products

Jitterbug

References · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0028 · Security Note
• https://bdu.fstec.ru/vul/2015-02667 · Security Note
• http://securityfocus.com/bid/9397 · Vendor Advisory
• http://debian.org/security/2004/dsa-420 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0028 · Security Note
• http://debian.org/security/dsa-420 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14207 · Note