Nessus Plugin #15843

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[GLSA-200411-37] Open DC Hub: Remote code execution

Family:

Gentoo Local Security Checks

Category:

infos

Copyright:

(C) 2004 Michel Arboi

Summary:

Open DC Hub: Remote code execution

Version:

$Revision: 1.1 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

GLSA:200411-37

Description:

The remote host is affected by the vulnerability described in GLSA-200411-37
(Open DC Hub: Remote code execution)


Donato Ferrante discovered a buffer overflow vulnerability in the
RedirectAll command of the Open DC Hub.

Impact

Upon exploitation, a remote user with administrative privileges
can execute arbitrary code on the system running the Open DC Hub.

Workaround

Only give administrative rights to trusted users.

References:
http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1115.html


Solution:
All Open DC Hub users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-p2p/opendchub-0.7.14-r2"


Risk factor : High