PT-2004-1041 · Debian · Rlpr

Published 2004-06-30 · Updated 2017-07-11 · CVE-2004-0454

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions rlpr versions 2.04

Description The issue concerns multiple vulnerabilities in the rlpr package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. A buffer overflow in the msg function for the rlpr daemon (rlprd) allows local users to execute arbitrary code.

Recommendations For version 2.04, consider restricting access to the rlpr daemon to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-04073

CVE-2004-0454

DSA-524

Affected Products

Rlpr

References · 11

• 🔥 http://securityfocus.com/bid/10578 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2004-0454 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04073 · Security Note
• http://debian.org/security/2004/dsa-524 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0454 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0393 · Security Note
• https://osv.dev/vulnerability/CVE-2004-0454 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0454 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0454 · Security Note
• http://debian.org/security/dsa-524 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16454 · Note