PT-2004-1112 · Cfengine · Cfengine

Published 2004-08-09 · Updated 2017-07-11 · CVE-2004-1701

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cfengine versions 2.0.0 through 2.1.7p1 Cfengine version 2.1.7 and earlier

Description The issue is related to a heap-based buffer overflow in the AuthenticationDialogue function in cfservd, which can be exploited by remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication. Multiple vulnerabilities in the cfengine package can lead to breaches of confidentiality, integrity, and availability of protected information, and these vulnerabilities can be exploited remotely.

Recommendations For Cfengine versions 2.0.0 through 2.1.7p1, consider disabling the AuthenticationDialogue function until a patch is available. For Cfengine version 2.1.7 and earlier, restrict access to the cfservd service to minimize the risk of exploitation. As a temporary workaround, avoid using long SAUTH commands during RSA authentication until the issue is resolved.

Exploit

Fix

Related Identifiers

BDU:2015-09467

CVE-2004-1701

Affected Products

Cfengine

References · 11

• 🔥 http://coresecurity.com/common/showdoc.php?idx=387&idxseccion=10 · Exploit
• 🔥 https://exploit-db.com/exploits/24361 · Exploit
• 🔥 https://exploit-db.com/exploits/24360 · Exploit
• 🔥 http://security.gentoo.org/glsa/glsa-200408-08.xml · Exploit
• 🔥 http://securityfocus.com/bid/10899 · Exploit
• http://secunia.com/advisories/12251 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1701 · Security Note
• https://bdu.fstec.ru/vul/2015-09467 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16935 · Note
• http://marc.info/?l=bugtraq&m=109208394910086&w=2 · Note
• http://marc.info/?l=bugtraq&m=110886670528775&w=2 · Note