Pavuk < 0.9.31 Multiple Unspecified Remote Buffer Overflows

Medium Nessus Network Monitor Plugin ID 2396

Synopsis

The remote host is vulnerable to an flaw that allows attackers to execute arbitrary commands.

Description

The remote host is using a version of Pavuk, a web spider, that is vulnerable to multiple unspecified buffer overflows. An attacker can construct a malicious website that is designed to trigger the vulnerability and run arbitrary code on the client machine.

Solution

Upgrade to Pavuk 0.9.31 or higher.

Plugin Details

Severity: Medium

ID: 2396

Family: Web Clients

Published: 2004/11/10

Modified: 2016/01/21

Dependencies: 1735, 8314

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 5.1

Temporal Score: 5

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 5.6

Temporal Score: 4.9

Vector: CVSS3#AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS3#E:U/RL:O/RC:C

Reference Information

BID: 11626