PT-2004-3707 · Fte+1 · Fte+6
Steve Kemp
·
Published
1970-01-01
·
Updated
2017-07-11
·
CVE-2003-0648
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
vfte versions prior to 0.50
fte-docs (affected versions not specified)
fte (affected versions not specified)
fte-xwindow (affected versions not specified)
fte-console (affected versions not specified)
fte-terminal (affected versions not specified)
Description
The issue involves multiple buffer overflows in vfte, based on FTE, which can be exploited by local users to execute arbitrary code. Additionally, there are multiple vulnerabilities in the fte, fte-docs, fte-xwindow, fte-console, and fte-terminal packages of the Debian GNU/Linux operating system. These vulnerabilities can lead to a breach of confidentiality, integrity, and availability of protected information and can be exploited remotely.
Recommendations
For vfte versions prior to 0.50, update to version 0.50 or later to resolve the buffer overflow issue.
For fte-docs, fte, fte-xwindow, fte-console, and fte-terminal, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Fte
Fte-Console
Fte-Docs
Fte-Terminal
Fte-Xwindow
Vfte