PT-2009-3974 · I-Filter · I-Filter

Maksymilian Arciemowicz · Published 2009-05-26 · Updated 2017-08-17 · CVE-2009-1476

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: IP Filter version 4.1.31

Description: The issue is related to a buffer overflow in the lib/load http.c file of the ippool component. This can be exploited by local users to gain privileges, specifically through vectors involving a long hostname in a URL.

Recommendations: For IP Filter version 4.1.31, consider applying a patch or fix to address the buffer overflow issue in the lib/load http.c file, specifically for the ippool component, to prevent local users from gaining privileges via a long hostname in a URL. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-1476

Affected Products

I-Filter

References · 7

• 🔥 http://securityreason.com/achievement_securityalert/62 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1476 · Security Note
• http://securityfocus.com/bid/35076 · Note
• http://securitytracker.com/id?1022272 · Note
• http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c.diff?r1=1.1&r2=1.2&f=h · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50716 · Note
• http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c · Note