« Volver al listado

CVE-2004-0601

Estado: ModificadaAlta (7.5)—

distcc anteriores a 2.16, cuando se ejecutan en plataformas de 64 bits, no interpreta reglas de control de acceso basadas en IP correctamente, lo que podría permitir a atacantes remotos sortear las restricciones pretendidas.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Distcc — Distcc

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-0601",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-12-23T05:00:00.000",
  "references": [
    {
      "url": "http://distcc.samba.org/ftp/distcc/distcc-2.17.NEWS",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/12711/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/11319",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17581",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://distcc.samba.org/ftp/distcc/distcc-2.17.NEWS",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/12711/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/11319",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17581",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions."
    },
    {
      "lang": "es",
      "value": "distcc anteriores a 2.16, cuando se ejecutan en plataformas de 64 bits, no interpreta reglas de control de acceso basadas en IP correctamente, lo que podría permitir a atacantes remotos sortear las restricciones pretendidas."
    }
  ],
  "lastModified": "2026-06-16T22:05:58.197",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:distcc:distcc:2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2BC13FB-BDC0-4BAC-A86D-976C8D8E5CB3"
            },
            {
              "criteria": "cpe:2.3:a:distcc:distcc:2.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76F3AAEE-29ED-46ED-8EB2-CEEFF9D26143"
            },
            {
              "criteria": "cpe:2.3:a:distcc:distcc:2.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE198B2A-861F-4C2D-B561-BF5D247DBC01"
            },
            {
              "criteria": "cpe:2.3:a:distcc:distcc:2.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D1C8E5F-F557-4C67-B64C-EEEB90E4451B"
            },
            {
              "criteria": "cpe:2.3:a:distcc:distcc:2.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B43EC657-653E-4871-B2E4-4F69B3FEFEB6"
            },
            {
              "criteria": "cpe:2.3:a:distcc:distcc:2.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C05727B9-068C-4889-A2CC-5922C5B18D1C"
            },
            {
              "criteria": "cpe:2.3:a:distcc:distcc:2.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6A4DFA3-111C-47DC-89B8-ABD43394A5EA"
            },
            {
              "criteria": "cpe:2.3:a:distcc:distcc:2.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F30BF94-5B03-42DF-B7BB-CBE1265E0E10"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}