PT-2004-3427 · Sticker · Sticker

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2535

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sticker versions prior to 3.1.0 beta 2

Description The person-to-person secure messaging feature in Sticker allows remote attackers to post messages to unauthorized private groups by using the group's public encryption key.

Recommendations For versions prior to 3.1.0 beta 2, update to version 3.1.0 beta 2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-2535

Affected Products

Sticker

References · 6

• http://osvdb.org/10662 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-2535 · Security Note
• http://securityfocus.com/bid/11333 · Patch
• http://securitytracker.com/id?1011580 · Patch
• http://tickertape.org/projects/sticker/release_notes-3.1.0b2.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17664 · Note