Cfengine cfservd ReceiveTransaction Function Remote Overflow (version check)

high Nessus Plugin ID 14317

Synopsis

The remote host is affected by a remote buffer overflow vulnerability.

Description

Cfengine is running on this remote host.

This version has a stack-based buffer overrun vulnerability.

An attacker, exploiting this flaw, would need network access to the server as well as the ability to send a crafted transaction packet to the cfservd process. Successful exploitation of this flaw would lead to arbitrary code being executed on the remote machine or a loss of service (DoS).

Solution

Upgrade to at least 1.5.3-4, 2.0.8 or most recent 2.1 version.

Plugin Details

Severity: High

ID: 14317

File Name: cfengine_trans_packet_buff_overrun.nasl

Version: 1.19

Type: local

Family: Gain a shell remotely

Published: 8/20/2004

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.6

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 9/25/2003

Reference Information

CVE: CVE-2003-0849

BID: 8699

Detections

Analytics