Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | |||
Test ID: | 1.3.6.1.4.1.25623.1.0.10378 |
Category: | Buffer overflow |
Title: | LCDproc buffer overflow |
Summary: | LCDproc is a system that is used to display system information and other data; on an LCD display (or any supported display; device, including curses or text) The LCDproc version 4.0 and above uses a client-server; protocol, allowing anyone with access to the LCDproc server to modify the displayed content.; It is possible to cause the LCDproc server to crash and execute arbitrary code by sending; the server a large buffer that will overflow its internal buffer. |
Description: | Summary: LCDproc is a system that is used to display system information and other data on an LCD display (or any supported display device, including curses or text) The LCDproc version 4.0 and above uses a client-server protocol, allowing anyone with access to the LCDproc server to modify the displayed content. It is possible to cause the LCDproc server to crash and execute arbitrary code by sending the server a large buffer that will overflow its internal buffer. Solution: Disable access to this service from outside by disabling access to TCP port 13666 (default port used) CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C |
Cross-Ref: |
BugTraq ID: 1131 Common Vulnerability Exposure (CVE) ID: CVE-2000-0295 http://www.securityfocus.com/bid/1131 Bugtraq: 20000420 Remote vulnerability in LCDproc 0.4 (Google Search) http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000421010946.15318I-200000@schizo.strange.net http://www.securityfocus.com/archive/1/305589/30/26390/threaded http://secunia.com/advisories/7829 XForce ISS Database: lcdproc-remote-overflow(4315) https://exchange.xforce.ibmcloud.com/vulnerabilities/4315 |
Copyright | This script is Copyright (C) 2000 SecuriTeam |
This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |