PT-2004-1027 · Xitalk · Xitalk

Published 2004-03-23 · Updated 2017-07-11 · CVE-2004-0151

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xitalk versions 1.1.11 and earlier

Description The issue allows local users to execute arbitrary commands, potentially leading to disruption of confidentiality, integrity, and availability of protected information. It can be exploited by a local attacker.

Recommendations For xitalk versions 1.1.11 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-03281

CVE-2004-0151

DSA-462

Affected Products

Xitalk

References · 9

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0151 · Security Note
• http://debian.org/security/2004/dsa-462 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03281 · Security Note
• http://securityfocus.com/bid/9851 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0151 · Security Note
• http://debian.org/security/dsa-462 · Note
• http://secunia.com/advisories/11114 · Note
• http://shellcode.org/Advisories/XITALK.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15456 · Note