[SECURITY] [DSA 2042-1] New iscsitarget packages fix arbitrary code execution

🗓️ 05 May 2010 21:16:13Reported by DebianType

The iscsitarget package in Debian before 2010 is vulnerable to remote attack due to multiple format string flaws, allowing arbitrary code execution

Reporter	Title	Published	Views	Family All 54
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Gentoo Linux operating system, which allows a malicious intruder to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 5 : scsi-target-utils (CESA-2010:0362)	1 Jun 201000:00	–	nessus
Tenable Nessus	Debian DSA-2042-1 : iscsitarget - format string	7 May 201000:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.1.0 : scsi-target-utils (EulerOS-SA-2019-1427)	14 May 201900:00	–	nessus
Tenable Nessus	GLSA-201201-06 : iSCSI Enterprise Target: Arbitrary code execution	24 Jan 201200:00	–	nessus
Tenable Nessus	Oracle Linux 5 : scsi-target-utils (ELSA-2010-0362)	12 Jul 201300:00	–	nessus
Tenable Nessus	RHEL 5 : scsi-target-utils (RHSA-2010:0362)	24 Jan 201300:00	–	nessus
Tenable Nessus	Scientific Linux Security Update : scsi-target-utils on SL5.x i386/x86_64	1 Aug 201200:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	5	any	iscsitarget	0.4.16+svn162-3.1+lenny1	iscsitarget_0.4.16+svn162-3.1+lenny1_any.deb
Debian	5	any	iscsitarget-source	0.4.16+svn162-3.1+lenny1	iscsitarget-source_0.4.16+svn162-3.1+lenny1_any.deb

05 May 2010 21:16Current

6.3Medium risk

Vulners AI Score6.3

CVSS 25

EPSS0.03381