PT-2004-1341 · Ppp · Pppd

Published 2004-03-15 · Updated 2017-10-10 · CVE-2004-0165

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions pppd versions 2.4.0 and earlier

Description A format string issue in the Point-to-Point Protocol (PPP) daemon allows remote attackers to read arbitrary process data, including authentication credentials for PAP or CHAP, potentially gaining privileges.

Recommendations For versions 2.4.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-0165

Affected Products

Pppd

References · 7

• 🔥 http://atstake.com/research/advisories/2004/a022304-1.txt · Exploit
• http://securityfocus.com/bid/9730 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0165 · Security Note
• http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html · Vendor Advisory
• http://kb.cert.org/vuls/id/841742 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15297 · Note
• http://osvdb.org/6822 · Note