PT-2005-3685 · Frox · Frox

Published 2005-09-07 · Updated 2008-09-05 · CVE-2005-2808

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions frox versions 0.7.16 through 0.7.17

Description The issue is related to the improper parsing of certain Deny ACLs, which could allow attackers to bypass intended restrictions and access blocked hosts.

Recommendations For versions 0.7.16 and 0.7.17, consider restricting access to blocked hosts until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2808

Affected Products

Frox

References · 5

• http://sourceforge.net/mailarchive/forum.php?thread_id=6492850&forum_id=1822 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2808 · Security Note
• http://secunia.com/advisories/14182 · Note
• http://securitytracker.com/id?1013089 · Note
• http://osvdb.org/13615 · Note