PT-2006-1913 · South River · Webdrive

Published 2006-02-23 · Updated 2018-10-18 · CVE-2006-0867

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions South River WebDrive versions 6.08 build 1131 through 8

Description The issue is related to a buffer overflow that can be triggered by a long string in the name entry field, allowing remote attackers to cause a denial of service, which results in an application crash and persistent erratic behavior.

Recommendations For versions 6.08 build 1131 through 8, avoid using long strings in the name entry field to prevent the buffer overflow until a fix is available. As a temporary workaround, consider restricting input length in the name field to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-0867

Affected Products

Webdrive

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2006-0867 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24903 · Note
• http://securityfocus.com/archive/1/425785/100/0/threaded · Note