Detections
Analytics
FreeBSD : sircd -- remote reverse DNS buffer overflow (1374b96c-a1c2-11db-9ddc-0011098b2f36)
high Nessus Plugin ID 24201
Synopsis
The remote FreeBSD host is missing a security-related update.Description
Secunia reports :A vulnerability in sircd can be exploited by a malicious person to compromise a vulnerable system. The vulnerability is caused by a boundary error in the code handling reverse DNS lookups, when a user connects to the service. If the FQDN (Fully Qualified Domain Name) returned is excessively long, the allocated buffer is overflowed making it possible to execute arbitrary code on the system with the privileges of the sircd daemon.
Solution
Update the affected package.See Also
Plugin Details
Severity: High
ID: 24201
File Name: freebsd_pkg_1374b96ca1c211db9ddc0011098b2f36.nasl
Version: 1.22
Type: local
Family: FreeBSD Local Security Checks
Published: 1/17/2007
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: High
Base Score: 8.3
Temporal Score: 7.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:sircd, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/15/2007
Vulnerability Publication Date: 2/24/2003
Reference Information
CVE: CVE-2003-1377
BID: 6924