PT-2004-1039 · Xboing · Xboing

Published 2004-03-25 · Updated 2017-07-11 · CVE-2004-0149

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions xboing versions prior to 2.4

Description The issue concerns multiple buffer overflows that can be exploited by local users to gain privileges. Additionally, there are multiple vulnerabilities in the xboing package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited by a local attacker.

Recommendations For versions prior to 2.4, update to version 2.4 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Exploit

Fix

Related Identifiers

BDU:2015-03666

CVE-2004-0149

DSA-451

Affected Products

Xboing

References · 7

• 🔥 http://securityfocus.com/bid/9764 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0149 · Security Note
• https://bdu.fstec.ru/vul/2015-03666 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0149 · Security Note
• http://debian.org/security/2004/dsa-451 · Patch, Vendor Advisory
• http://debian.org/security/dsa-451 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15347 · Note