CVE-2006-6749

Опубликовано: 27 дек. 2006

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Buffer overflow in the parse_expression function in parse_config in OpenSER 1.1.0 allows attackers to have an unknown impact via a long str parameter.

Ссылки

http://securityreason.com/securityalert/2083
http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.042.html
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/455097/100/0/threaded
http://www.securityfocus.com/archive/1/455300/100/0/threaded
http://www.securityfocus.com/bid/21706
http://www.vupen.com/english/advisories/2006/5167
https://exchange.xforce.ibmcloud.com/vulnerabilities/31035
http://securityreason.com/securityalert/2083
http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.042.html
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/455097/100/0/threaded
http://www.securityfocus.com/archive/1/455300/100/0/threaded
http://www.securityfocus.com/bid/21706
http://www.vupen.com/english/advisories/2006/5167
https://exchange.xforce.ibmcloud.com/vulnerabilities/31035

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openser:openser:1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.01803

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2006-6749

debian

больше 19 лет назад

Buffer overflow in the parse_expression function in parse_config in Op ...

GHSA-28hc-x595-5rcr

github

больше 4 лет назад