Hummingbird Inetd Multiple Remote Overflows

High Nessus Network Monitor Plugin ID 2941

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host is running Hummingbird Inetd, a commercial INETD server. This version of Inetd is vulnerable to a remote overflow in the lpd service module. An attacker exploiting this flaw would be able to execute arbitrary code on the remote system. NOTE: this is only a flaw if the lpd module is enabled. In addition, the remote ftpd module is vulnerable to a remote buffer overflow. An attacker exploiting this flaw would be able to execute arbitrary code on the remote system.

Solution

Upgrade or patch according to vendor recommendations.

See Also

http://connectivity.hummingbird.com

Plugin Details

Severity: High

ID: 2941

File Name: 2941.prm

Family: FTP Servers

Published: 2005/05/27

Modified: 2016/01/22

Dependencies: 1803, 1804, 3222

Nessus ID: 18402, 18403

Risk Information

Risk Factor: High

CVSSv2

Base Score: 7.2

Temporal Score: 6

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

CVSSv3

Base Score: 8.4

Temporal Score: 7.8

Vector: CVSS3#AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS3#E:F/RL:O/RC:C

Exploitable With

Metasploit (Hummingbird Connectivity 10 SP5 LPD Buffer Overflow)

Reference Information

CVE: CVE-2005-1815, CVE-2005-2599

BID: 13790, 13788, 14559

OSVDB: 16956, 16957, 18734