PT-2004-1025 · Nd · Nd

Published 2004-01-08 · Updated 2017-07-11 · CVE-2004-0014

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions nd versions 0.8.2 and earlier

Description The issue concerns multiple buffer overflows in the nd WebDAV interface, which can be exploited remotely by web servers to execute arbitrary code via certain long strings. This can lead to a breach of confidentiality, integrity, and availability of protected information.

Recommendations For versions 0.8.2 and earlier, consider disabling the WebDAV interface until a patch is available to prevent remote exploitation. Restrict access to the nd package to minimize the risk of exploitation. Avoid using long strings in the WebDAV interface until the issue is resolved.

Fix

Related Identifiers

BDU:2015-03110

CVE-2004-0014

DSA-412

Affected Products

Nd

References · 13

• https://osv.dev/vulnerability/CVE-2004-0014 · Vendor Advisory
• http://debian.org/security/2004/dsa-412 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0014 · Vendor Advisory
• http://securityfocus.com/bid/9365 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0014 · Security Note
• https://bdu.fstec.ru/vul/2015-03110 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2004-0014 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0014 · Security Note
• http://securitytracker.com/id?1008616 · Note
• http://secunia.com/advisories/10549 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14141 · Note
• http://secunia.com/advisories/10550 · Note
• http://debian.org/security/dsa-412 · Note