Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.52494
Kategorie:FreeBSD Local Security Checks
Titel:FreeBSD Ports: anubis
Zusammenfassung:The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update to the system
as announced in the referenced advisory.

Vulnerability Insight:
The following package is affected: anubis

CVE-2004-0353
Multiple buffer overflows in auth_ident() function in auth.c for GNU
Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers
to gain privileges via a long string.

CVE-2004-0354
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through
3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary
code via format string specifiers in strings passed to (1) the info
function in log.c, (2) the anubis_error function in errs.c, or (3) the
ssl_error function in ssl.c.

Solution:
Update your system with the appropriate patches or
software upgrades.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2004-0353
BugTraq ID: 9772
http://www.securityfocus.com/bid/9772
Bugtraq: 20040304 GNU Anubis buffer overflows and format string bugs (Google Search)
http://marc.info/?l=bugtraq&m=107843915424588&w=2
Bugtraq: 20040310 GNU Anubis 3.6.2 remote root exploit (Google Search)
http://marc.info/?l=bugtraq&m=107894315012081&w=2
http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html
XForce ISS Database: anubis-ident-bo(15345)
https://exchange.xforce.ibmcloud.com/vulnerabilities/15345
Common Vulnerability Exposure (CVE) ID: CVE-2004-0354
XForce ISS Database: anubis-format-string(15346)
https://exchange.xforce.ibmcloud.com/vulnerabilities/15346
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.