PT-2004-1694 · Distcc · Distcc

Published 2004-11-19 · Updated 2017-07-11 · CVE-2004-0601

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions distcc versions prior to 2.16

Description The issue concerns the incorrect interpretation of IP-based access control rules on 64-bit platforms, potentially allowing remote attackers to bypass intended restrictions.

Recommendations For versions prior to 2.16, update to version 2.16 or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-0601

Affected Products

Distcc

References · 8

• https://security-tracker.debian.org/tracker/CVE-2004-0601 · Vendor Advisory
• http://securityfocus.com/bid/11319 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0601 · Security Note
• http://secunia.com/advisories/12711 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0601 · Vendor Advisory
• http://distcc.samba.org/ftp/distcc/distcc-2.17.NEWS · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0601 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17581 · Note