Detections
Analytics
Hummingbird Inetd Multiple Remote Overflows
high Nessus Network Monitor Plugin ID 2941
Synopsis
The remote host is vulnerable to a buffer overflow.Description
The remote host is running Hummingbird Inetd, a commercial INETD server. This version of Inetd is vulnerable to a remote overflow in the lpd service module. An attacker exploiting this flaw would be able to execute arbitrary code on the remote system. NOTE: this is only a flaw if the lpd module is enabled. In addition, the remote ftpd module is vulnerable to a remote buffer overflow. An attacker exploiting this flaw would be able to execute arbitrary code on the remote system.Solution
Upgrade or patch according to vendor recommendations.See Also
Plugin Details
Severity: High
ID: 2941
Family: FTP Servers
Published: 5/27/2005
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 6
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.4
Temporal Score: 7.8
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:hummingbird:connectivity
Exploitable With
Metasploit (Hummingbird Connectivity 10 SP5 LPD Buffer Overflow)
Reference Information
CVE: CVE-2005-1815, CVE-2005-2599