PT-2004-1285 · Xsok · Xsok

Published 2004-01-22 · Updated 2017-07-11 · CVE-2004-0074

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions xsok version 1.02

Description The issue is related to multiple buffer overflows that allow local users to gain privileges. This can be achieved via a long LANG environment variable, or a long -xsokdir command line argument.

Recommendations For xsok version 1.02, consider restricting the length of the LANG environment variable and the -xsokdir command line argument to prevent buffer overflows until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2004-0074

Affected Products

Xsok

References · 9

• 🔥 http://securityfocus.com/bid/9352 · Exploit
• 🔥 http://securityfocus.com/bid/9341 · Exploit
• 🔥 https://exploit-db.com/exploits/23510 · Exploit
• 🔥 https://exploit-db.com/exploits/140 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0074 · Security Note
• http://marc.info/?l=bugtraq&m=107332542918529&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14906 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14910 · Note
• http://marc.info/?l=bugtraq&m=107307407027259&w=2 · Note