Pavuk < 0.9.31 Multiple Unspecified Remote Buffer Overflows

medium Nessus Network Monitor Plugin ID 2396

Synopsis

The remote host is vulnerable to an flaw that allows attackers to execute arbitrary commands.

Description

The remote host is using a version of Pavuk, a web spider, that is vulnerable to multiple unspecified buffer overflows. An attacker can construct a malicious website that is designed to trigger the vulnerability and run arbitrary code on the client machine.

Solution

Upgrade to Pavuk 0.9.31 or higher.

Plugin Details

Severity: Medium

ID: 2396

Family: Web Clients

Published: 11/10/2004

Updated: 3/6/2019

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 5.1

Temporal Score: 3.8

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: Medium

Base Score: 5.6

Temporal Score: 4.9

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Reference Information

BID: 11626

Detections

Analytics