PT-2004-1022 · Pwlib+1 · Pwlib+1
Published
2004-02-13
·
Updated
2017-10-11
·
CVE-2004-0097
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
PWLib versions prior to 1.6.0
pwlib version 1.4.7
pwlib-devel version 1.4.7
Description
The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of the issue can be carried out remotely, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
Recommendations
For PWLib versions prior to 1.6.0, update to version 1.6.0 or later to resolve the issue.
For pwlib version 1.4.7, consider upgrading to a newer version to mitigate the risk.
For pwlib-devel version 1.4.7, consider upgrading to a newer version to mitigate the risk.
As a temporary workaround, consider restricting access to the H.225 protocol to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Pwlib
Pwlib-Devel