Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-1502

Опубликовано: 08 мар. 2012
Источник: redhat
CVSS2: 4.3
EPSS Средний

Описание

Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a NULL byte in a password string.

Отчет

The Red Hat Security Response Team has rated this issue as having low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6PyPAMWill not fix
Red Hat Satellite 5.4ServerWill not fix

Показывать по

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=801116PyPAM: Double free by processing passwords containing NULL-bytes

EPSS

Процентиль: 96%
0.22926
Средний

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 13 лет назад

Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a NULL byte in a password string.

nvd
больше 13 лет назад

Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a NULL byte in a password string.

debian
больше 13 лет назад

Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0. ...

github
больше 3 лет назад

Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a NULL byte in a password string.

EPSS

Процентиль: 96%
0.22926
Средний

4.3 Medium

CVSS2

Уязвимость CVE-2012-1502