PT-2004-1044
CVE-2004-0987
·
تاريخ النشر
2004-12-05
·
تاريخ التحديث
2018-10-30
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
yardradius version 1.0.20
Description
The issue affects the yardradius package in Debian GNU/Linux, potentially leading to breaches in confidentiality, integrity, and availability of protected information. It can be exploited remotely. A buffer overflow in the
process menu function allows remote attackers to execute arbitrary code.Recommendations
For yardradius version 1.0.20, consider disabling the
process menu function as a temporary workaround until a patch is available. Restrict access to the yardradius package to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾