Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-2903

Опубликовано: 02 сент. 2011
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. NOTE: this is only a vulnerability in limited scenarios in which tcptrack is "configured as a handler for other applications." This issue might not qualify for inclusion in CVE.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rhythm:tcptrack:*:*:*:*:*:*:*:*
Версия до 1.4.1 (включая)
cpe:2.3:a:rhythm:tcptrack:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.1:*:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.1:beta1:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:rhythm:tcptrack:1.4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 81%
0.0162
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 14 лет назад

Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. NOTE: this is only a vulnerability in limited scenarios in which tcptrack is "configured as a handler for other applications." This issue might not qualify for inclusion in CVE.

debian
больше 14 лет назад

Heap-based buffer overflow in tcptrack before 1.4.2 might allow attack ...

github
больше 3 лет назад

Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. NOTE: this is only a vulnerability in limited scenarios in which tcptrack is "configured as a handler for other applications." This issue might not qualify for inclusion in CVE.

EPSS

Процентиль: 81%
0.0162
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119