PT-2006-1256 · Cray · Unicos

Published 2006-01-11 · Updated 2017-07-20 · CVE-2006-0178

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UNICOS version 9.0.2.2

Description A format string issue exists in the /bin/ftp program, potentially allowing local users to have an unknown impact via format string specifiers in the "quote" command. The program is not setuid and not normally called from remote programs, which may limit the attack vector.

Recommendations For UNICOS version 9.0.2.2, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2006-0178

Affected Products

Unicos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-0178 · Security Note
• http://securityfocus.com/bid/16205 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0343.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24277 · Note