PT-2004-1507 · Gnu · Gnu Anubis

Ulf Harnhammar · Published 2004-03-18 · Updated 2017-07-11 · CVE-2004-0353

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GNU Anubis versions 3.6.0 through 3.6.2 GNU Anubis versions 3.9.92 and 3.9.93

Description The issue is related to multiple buffer overflows in the auth ident() function in auth.c. This allows remote attackers to gain privileges via a long string.

Recommendations For GNU Anubis versions 3.6.0 through 3.6.2, consider updating to a version that fixes the buffer overflows in the auth ident() function. For GNU Anubis versions 3.9.92 and 3.9.93, consider updating to a version that fixes the buffer overflows in the auth ident() function. As a temporary workaround, consider restricting access to the auth ident() function until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2004-0353

Affected Products

Gnu Anubis

References · 7

• 🔥 http://securityfocus.com/bid/9772 · Exploit
• 🔥 https://exploit-db.com/exploits/23772 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0353 · Security Note
• http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html · Note
• http://marc.info/?l=bugtraq&m=107843915424588&w=2 · Note
• http://marc.info/?l=bugtraq&m=107894315012081&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15345 · Note