Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-3302

Опубликовано: 05 окт. 2010
Источник: nvd
CVSS2: 6.5
EPSS Низкий

Описание

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:xelerance:openswan:2.6.25:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.26:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.27:*:*:*:*:*:*:*
cpe:2.3:a:xelerance:openswan:2.6.28:*:*:*:*:*:*:*

EPSS

Процентиль: 90%
0.06107
Низкий

6.5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
почти 15 лет назад

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.

redhat
почти 15 лет назад

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.

debian
почти 15 лет назад

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2. ...

github
больше 3 лет назад

Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.

oracle-oval
больше 14 лет назад

ELSA-2010-0892: openswan security update (MODERATE)

EPSS

Процентиль: 90%
0.06107
Низкий

6.5 Medium

CVSS2

Дефекты

CWE-119