PT-2006-1011 · Smstools · Sms Server Tools

Ulf Harnhammar · Published 2006-01-09 · Updated 2017-07-20 · CVE-2006-0083

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: SMS Server Tools (smstools) versions 1.14.8 and earlier

Description: The issue is related to a format string vulnerability in the logging code, which could allow local users to execute arbitrary code. Additionally, there are multiple vulnerabilities in the smstools package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited by a local attacker.

Recommendations: For versions 1.14.8 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-02587

CVE-2006-0083

DSA-930-1

DSA-930-2

Affected Products

Sms Server Tools

References · 13

• http://secunia.com/advisories/18357 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-0083 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0083 · Security Note
• http://secunia.com/advisories/18343 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0083 · Security Note
• https://osv.dev/vulnerability/CVE-2006-0083 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02587 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-0083 · Vendor Advisory
• http://debian.org/security/2005/dsa-930 · Vendor Advisory
• http://securityfocus.com/bid/16188 · Note
• http://debian.org/security/dsa-930 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24034 · Note
• http://osvdb.org/22287 · Note