CVE-2000-0437: Buffer Overflow
Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
CyberPatrol cyberdaemon (gauntlet/WebShield)from your environment.Uninstall or remove the cyberdaemon component from systems where it is not required to eliminate the vulnerable daemon.
- Configuration
Stop and disable the cyberdaemon service on affected hosts until a vendor patch or fixed version is available.
CyberPatrol cyberdaemon (used by gauntlet and WebShield) service_enabled = false - Compensating control
Block or restrict network access to the cyberdaemon service at perimeter and host firewalls (allow only trusted management IPs) to prevent remote exploitation.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0437?
CVE-2000-0437 has a high severity due to its potential for remote command execution and denial of service.
How do I fix CVE-2000-0437?
To remediate CVE-2000-0437, update the affected software to the latest patched version provided by the vendor.
What software is affected by CVE-2000-0437?
CVE-2000-0437 affects Network Associates Gauntlet Firewall versions 4.1, 4.2, 5.0, and 5.5, as well as WebShield versions 4.0 and 100.0, and WebShield e-ppliance 300.0.
What type of attack can exploit CVE-2000-0437?
CVE-2000-0437 can be exploited through buffer overflow attacks, allowing remote attackers to execute arbitrary commands or cause a denial of service.
When was CVE-2000-0437 disclosed?
CVE-2000-0437 was disclosed in 2000, highlighting vulnerabilities in CyberPatrol daemon components.