Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-3302

Опубликовано: 05 окт. 2010
Источник: nvd
CVSS2: 6.5
EPSS Низкий

Описание

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:xelerance:openswan:2.6.25:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.26:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.27:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.28:*:*:*:*:*:*:*

EPSS

Процентиль: 90%
0.06107
Низкий

6.5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 14 лет назад

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.

redhat
больше 14 лет назад

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.

debian
больше 14 лет назад

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2. ...

github
около 3 лет назад

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.

oracle-oval
больше 14 лет назад

ELSA-2010-0892: openswan security update (MODERATE)

EPSS

Процентиль: 90%
0.06107
Низкий

6.5 Medium

CVSS2

Дефекты

CWE-119