PT-2004-3712 · Debian · Fsp

Published 1970-01-01 · Updated 2017-10-10 · CVE-2004-0011

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions fsp versions prior to 2.81.b18

Description The issue allows remote users to execute arbitrary code due to a buffer overflow. Multiple vulnerabilities in the fsp package of the Debian GNU/Linux operating system can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

Recommendations For versions prior to 2.81.b18, update to version 2.81.b18 or later to resolve the issue. As a temporary workaround, consider restricting access to the fsp package to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-03108

BDU:2015-03109

CVE-2004-0011

DSA-416

Affected Products

Fsp

References · 10

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0011 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0011 · Security Note
• http://securityfocus.com/bid/9377 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03109 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1022 · Security Note
• http://debian.org/security/2004/dsa-416 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03108 · Security Note
• http://debian.org/security/dsa-416 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14155 · Note
• http://ciac.org/ciac/bulletins/o-048.shtml · Note