CVE-2011-4093

Опубликовано: 10 фев. 2014

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.

Ссылки

http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=ac61d7fb42a1f977fb527e024bede319c4a9e169%3Bhp=08c8e2261604c6fcbbaf62f9ae9d13f7015fcb9a
http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/10/31/1
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
Third Party Advisory
https://bugzilla.novell.com/show_bug.cgi?id=727710
Issue Tracking
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=750631
Issue Tracking
Third Party Advisory
VDB Entry
http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=ac61d7fb42a1f977fb527e024bede319c4a9e169%3Bhp=08c8e2261604c6fcbbaf62f9ae9d13f7015fcb9a
http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/10/31/1
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
Third Party Advisory
https://bugzilla.novell.com/show_bug.cgi?id=727710
Issue Tracking
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=750631
Issue Tracking
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:armin_burgmeier:net6:*:*:*:*:*:*:*:*

Версия до 1.3.13 (включая)

cpe:2.3:a:armin_burgmeier:net6:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:armin_burgmeier:net6:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:armin_burgmeier:net6:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:armin_burgmeier:net6:1.3.4:*:*:*:*:*:*:*

cpe:2.3:a:armin_burgmeier:net6:1.3.5:*:*:*:*:*:*:*

cpe:2.3:a:armin_burgmeier:net6:1.3.6:*:*:*:*:*:*:*

cpe:2.3:a:armin_burgmeier:net6:1.3.7:*:*:*:*:*:*:*

cpe:2.3:a:armin_burgmeier:net6:1.3.8:*:*:*:*:*:*:*

cpe:2.3:a:armin_burgmeier:net6:1.3.9:*:*:*:*:*:*:*

cpe:2.3:a:armin_burgmeier:net6:1.3.10:*:*:*:*:*:*:*

cpe:2.3:a:armin_burgmeier:net6:1.3.11:*:*:*:*:*:*:*

cpe:2.3:a:armin_burgmeier:net6:1.3.12:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*

cpe:2.3:o:opensuse_project:opensuse:11.4:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.0043

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVE-2011-4093

ubuntu

почти 12 лет назад

CVE-2011-4093

debian

почти 12 лет назад

Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 ...

GHSA-fx8p-5v6x-xjjv

github

больше 3 лет назад

EPSS

Процентиль: 62%

0.0043

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-190