PT-2005-4533 · Ipupdate · Ipupdate

Published 2005-11-23 · Updated 2011-03-08 · CVE-2005-3780

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IPUpdate version 1.1

Description The issue is related to multiple buffer overflows that could allow attackers to execute arbitrary code. This can occur via the memmcat function in the memm module or through certain TSIG format records.

Recommendations For IPUpdate version 1.1, update to a version that fixes the buffer overflow issues in the memm module and handles TSIG format records securely.

Fix

Related Identifiers

CVE-2005-3780

Affected Products

Ipupdate

References · 7

• http://securityfocus.com/bid/15534 · Vendor Advisory
• http://secunia.com/advisories/17681 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3780 · Security Note
• http://sourceforge.net/project/shownotes.php?release_id=372666 · Note
• http://vupen.com/english/advisories/2005/2523 · Note
• http://osvdb.org/21037 · Note
• http://osvdb.org/21036 · Note