PT-2008-1998 · Unknown · Core Force

Sebastian Gottschalk · Published 2008-01-18 · Updated 2018-10-15 · CVE-2008-0365

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CORE FORCE versions prior to 0.95.172

Description The issue is related to multiple buffer overflows that can be triggered by local users through crafted arguments to certain functions. This can lead to a denial of service, causing the system to crash, and potentially allow the execution of arbitrary code in the kernel context. The buffer overflows can occur in (1) IOCTL functions within the Firewall module or (2) SSDT hook handler functions in the Registry module.

Recommendations For versions prior to 0.95.172, update to version 0.95.172 or later to resolve the issue. As a temporary workaround, consider restricting access to the Firewall and Registry modules to minimize the risk of exploitation. Avoid using crafted arguments to IOCTL functions in the Firewall module or SSDT hook handler functions in the Registry module until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-0365

Affected Products

Core Force

References · 10

• 🔥 https://exploit-db.com/exploits/31036 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0365 · Security Note
• http://securitytracker.com/id?1019245 · Note
• http://vupen.com/english/advisories/2008/0242 · Note
• http://coresecurity.com/?action=item&id=2025 · Note
• http://securityfocus.com/archive/1/486513/100/0/threaded · Note
• http://securityfocus.com/bid/27341 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39758 · Note
• http://securityreason.com/securityalert/3555 · Note
• http://force.coresecurity.com/index.php?module=articles&func=display&aid=32 · Note