PT-2004-1040 · Debian · Rlpr

Published 2004-06-30 · Updated 2017-07-11 · CVE-2004-0393

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions rlpr versions 2.0.4

Description The issue concerns multiple vulnerabilities in the rlpr package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. A format string vulnerability exists in the msg function for the rlpr daemon (rlprd), allowing remote attackers to execute arbitrary code via format string specifiers in a buffer provided to the syslog function.

Recommendations For version 2.0.4, consider disabling the vulnerable msg function in the rlpr daemon until a patch is available. Restrict access to the rlpr daemon to minimize the risk of exploitation. Avoid using the vulnerable version of the rlpr package until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-04073

CVE-2004-0393

DSA-524

Affected Products

Rlpr

References · 14

• 🔥 https://exploit-db.com/exploits/24223 · Exploit
• 🔥 http://securityfocus.com/bid/10578 · Exploit
• 🔥 https://exploit-db.com/exploits/307 · Exploit
• https://bdu.fstec.ru/vul/2015-04073 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0393 · Security Note
• http://debian.org/security/2004/dsa-524 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-0393 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0393 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0393 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0454 · Security Note
• https://osv.dev/vulnerability/CVE-2004-0393 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16453 · Note
• http://debian.org/security/dsa-524 · Note
• http://marc.info/?l=bugtraq&m=108810992313652&w=2 · Note