CVE-2004-1702

Опубликовано: 09 авг. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction function, which leads to a failed malloc call and triggers to a null dereference, which allows remote attackers to cause a denial of service (crash).

Ссылки

http://marc.info/?l=bugtraq&m=109208394910086&w=2
http://secunia.com/advisories/12251
Patch
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200408-08.xml
Exploit
Patch
Vendor Advisory
http://www.coresecurity.com/common/showdoc.php?idx=387&idxseccion=10
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10900
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16937
http://marc.info/?l=bugtraq&m=109208394910086&w=2
http://secunia.com/advisories/12251
Patch
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200408-08.xml
Exploit
Patch
Vendor Advisory
http://www.coresecurity.com/common/showdoc.php?idx=387&idxseccion=10
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10900
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16937

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnu:cfengine:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.5:b1:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.5:pre:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.5:pre2:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.7:p1:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.7:p2:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.7:p3:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.8:p1:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.1.0:a6:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.1.0:a8:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.1.0:a9:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.1.7:p1:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.02116

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-1702

debian

около 21 года назад

The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2 ...

GHSA-h46r-7fc6-g355

github

больше 3 лет назад

BDU:2015-09467

fstec