PT-2004-1663 · Gopher · Gopherd

Jaguar · Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-0560

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gopherd version 3.0.3

Description The issue is related to an integer overflow in the gopher daemon. This can be triggered by remote attackers sending crafted content of a certain size, potentially leading to a denial of service and possibly the execution of arbitrary code.

Recommendations For gopherd version 3.0.3, update to a newer version that addresses the integer overflow issue to prevent potential denial of service and arbitrary code execution.

Fix

Related Identifiers

CVE-2004-0560

DSA-638-1

Affected Products

Gopherd

References · 6

• http://debian.org/security/2004/dsa-638 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-0560 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0560 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0560 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0560 · Vendor Advisory
• http://secunia.com/advisories/13855 · Note