PT-2007-4809 · Bbs100 · Bbs100

Published 2007-07-03 · Updated 2017-07-29 · CVE-2007-3551

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:N/AC:L/Au:M/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions bbs100 versions prior to 3.2

Description The issue allows remote attackers to cause a denial of service by attempting to login as the Guest user when another Guest user is already logged in. This is possibly related to the state login prompt function in state login.c.

Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue. As a temporary workaround, consider restricting concurrent Guest user logins to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-3551

Affected Products

Bbs100

References · 6

• http://securityfocus.com/bid/24747 · Patch
• http://secunia.com/advisories/25924 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3551 · Security Note
• http://ka.sara.nl/home/walter//bbs100/ChangeLog.txt · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35244 · Note
• http://osvdb.org/37805 · Note