PT-2005-1260 · Openswan · Openswan

Publicado 2005-01-26 · Atualizado 2019-07-29 · CVE-2005-0162

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Openswan versions 1.x prior to 1.0.9 Openswan versions 2.x prior to 2.3.0

Description A stack-based buffer overflow issue exists in the get internal addresses function of the pluto application for Openswan, when compiled with XAUTH and PAM enabled. This allows remote authenticated attackers to execute arbitrary code.

Recommendations For Openswan versions 1.x prior to 1.0.9, update to version 1.0.9 or later. For Openswan versions 2.x prior to 2.3.0, update to version 2.3.0 or later.

Correção

Identificadores relacionados

CVE-2005-0162

Produtos afetados

Openswan

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2005-0162 · Nota de Segurança
• http://osvdb.org/13195 · Nota
• http://openswan.org/support/vuln/IDEF0785 · Aviso do Fabricante
• http://redhat.com/archives/fedora-announce-list/2005-January/msg00103.html · Aviso do Fabricante
• http://secunia.com/advisories/14062 · Nota
• http://securityfocus.com/bid/12377 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19078 · Nota
• http://idefense.com/application/poi/display?id=190&type=vulnerabilities · Aviso do Fabricante
• http://securitytracker.com/id?1013014 · Nota
• http://secunia.com/advisories/14038 · Nota