PT-2004-1860 · Posadis+2 · Posadis+3

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-0789

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Posadis using Poslib versions 1.0.2-1 and earlier Axis Network products versions before 3.13 Men & Mice Suite versions 2.2x before 2.2.3 Men & Mice Suite versions 3.5.x before 3.5.2

Description The issue allows remote attackers to cause a denial of service by triggering a communications loop. This can be achieved via DNS query packets with localhost as a spoofed source address, or a response packet that triggers another response packet, leading to CPU and network bandwidth consumption.

Recommendations For Posadis using Poslib versions 1.0.2-1 and earlier, update to a version later than 1.0.2-1. For Axis Network products versions before 3.13, update to firmware 3.13 or later. For Men & Mice Suite versions 2.2x before 2.2.3, update to version 2.2.3 or later. For Men & Mice Suite versions 3.5.x before 3.5.2, update to version 3.5.2 or later.

Fix

Related Identifiers

CVE-2004-0789

Affected Products

Axis Network

Men & Mice Suite

Posadis

Poslib

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2004-0789 · Security Note
• http://securityfocus.com/bid/11642 · Patch
• http://niscc.gov.uk/niscc/docs/re-20041109-00957.pdf · Vendor Advisory
• http://securitytracker.com/id?1012157 · Patch
• http://niscc.gov.uk/niscc/docs/al-20041130-00862.html?lang=en · Vendor Advisory
• http://posadis.org/advisories/pos_adv_006.txt · Vendor Advisory
• http://secunia.com/advisories/13145 · Patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0789 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17997 · Note