PT-2007-1010 · Tinymux · Tinymux

Duskwave · Published 2007-03-24 · Updated 2013-07-23 · CVE-2007-1655

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: TinyMUX versions prior to 20070126

Description: The issue is related to a buffer overflow in the fun ladd function, which might allow remote attackers to cause a denial of service or possibly execute arbitrary code. Additionally, there are multiple vulnerabilities in the TinyMUX package that can lead to breaches of confidentiality, integrity, and availability of protected information, and these can be exploited remotely.

Recommendations: For versions prior to 20070126, update to a version released after 20070126 to resolve the issue. As a temporary workaround, consider restricting access to the fun ladd function in funmath.cpp to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-01990

CVE-2007-1655

DSA-1317-1

Affected Products

Tinymux

References · 15

• https://bdu.fstec.ru/vul/2015-01990 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2007-1655 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1655 · Security Note
• https://osv.dev/vulnerability/CVE-2007-1655 · Vendor Advisory
• http://debian.org/security/2007/dsa-1317 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1655 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-1655 · Vendor Advisory
• http://tinymux.org/changes.txt · Note
• http://osvdb.org/34686 · Note
• http://secunia.com/advisories/24733 · Note
• http://securityfocus.com/bid/23292 · Note
• http://code.google.com/p/tinymux/issues/detail?id=282&can=2&q= · Note
• http://secunia.com/advisories/25784 · Note
• http://debian.org/security/dsa-1317 · Note
• http://vupen.com/english/advisories/2007/1213 · Note