PT-2005-2710 · Ibsh · Iron Bars Shell

Published 2005-05-24 · Updated 2008-09-05 · CVE-2005-1738

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Iron Bars SHell (ibsh) versions prior to 0.3d

Description The issue allows users to access files outside the home directory and possibly execute arbitrary code via certain inputs that are not properly handled in a syslog call. This is due to a format string vulnerability in the logPrintBadfile function in delbadfiles.c.

Recommendations For versions prior to 0.3d, update to version 0.3d or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-1738

Affected Products

Iron Bars Shell

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-1738 · Security Note
• http://secunia.com/advisories/15473 · Vendor Advisory
• http://securityfocus.com/bid/13720 · Patch
• http://sourceforge.net/project/shownotes.php?release_id=329340 · Patch