CVE-2003-0795

Опубликовано: 15 дек. 2003

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.

Ссылки

http://marc.info/?l=bugtraq&m=106883387304266&w=2
http://secunia.com/advisories/10563
Vendor Advisory
http://www.debian.org/security/2004/dsa-415
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-305.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-307.html
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=106883387304266&w=2
http://secunia.com/advisories/10563
Vendor Advisory
http://www.debian.org/security/2004/dsa-415
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-305.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-307.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnu:zebra:0.91a:*:*:*:*:*:*:*

cpe:2.3:a:gnu:zebra:0.92a:*:*:*:*:*:*:*

cpe:2.3:a:gnu:zebra:0.93a:*:*:*:*:*:*:*

cpe:2.3:a:gnu:zebra:0.93b:*:*:*:*:*:*:*

cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*

Версия до 0.96.3 (включая)

cpe:2.3:a:quagga:quagga:0.95:*:*:*:*:*:*:*

cpe:2.3:a:quagga:quagga:0.96:*:*:*:*:*:*:*

cpe:2.3:a:quagga:quagga:0.96.1:*:*:*:*:*:*:*

cpe:2.3:a:quagga:quagga:0.96.2:*:*:*:*:*:*:*

cpe:2.3:a:sgi:propack:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08008

Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2003-0795

redhat

почти 22 года назад

CVE-2003-0795

debian

больше 21 года назад

The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, do ...

GHSA-77hp-5q78-94cv

github

больше 3 лет назад

EPSS

Процентиль: 92%

0.08008

Низкий

5 Medium

CVSS2

Дефекты

CWE-20