PT-2004-2667 · Haht · Hahtsite Scenario Server

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1763

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HAHTsite Scenario Server version 5.1 Patch 06 (build 91)

Description The issue is related to a buffer overflow in hsrun.exe, which can be triggered by a long project name. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code.

Recommendations For HAHTsite Scenario Server version 5.1 Patch 06 (build 91), consider restricting the length of project names to prevent the buffer overflow until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2004-1763

Affected Products

Hahtsite Scenario Server

References · 7

• 🔥 http://secunia.com/advisories/11288 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1763 · Security Note
• http://securityfocus.com/bid/10033 · Patch
• http://marc.info/?l=full-disclosure&m=108091662105032&w=2 · Note
• http://kb.cert.org/vuls/id/705958 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15717 · Note
• http://protego.dk/advisories/200405.html · Note