PT-2008-1823 · Kame · Kame Project

Mu-B + 1 · Publicado 2008-02-07 · Atualizado 2017-09-29 · CVE-2008-0177

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions KAME project versions prior to 20071201

Description The issue is related to the ipcomp6 input function in the KAME project, which does not properly check the return value of the m pulldown function. This allows remote attackers to cause a denial of service, resulting in a system crash, via an IPv6 packet with an IPComp header.

Recommendations For versions prior to 20071201, update to a version released after 20071201 to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2008-0177

Produtos afetados

Kame Project

Referências · 22

• 🔥 https://exploit-db.com/exploits/5191 · Exploit
• 🔥 http://kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ipcomp_input.c.diff?r1=1.36;r2=1.37 · Exploit
• http://secunia.com/advisories/28788 · Aviso do Fabricante
• http://secunia.com/advisories/28979 · Nota
• http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/ipcomp_input.c?f=u&only_with_tag=netbsd-3-1 · Aviso do Fabricante
• http://securityfocus.com/bid/27642 · Correção
• http://vupen.com/english/advisories/2008/1697 · Nota
• http://securitytracker.com/id?1019314 · Nota
• http://secunia.com/advisories/28816 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html · Aviso do Fabricante
• http://secunia.com/advisories/31074 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0177 · Nota de Segurança
• http://secunia.com/advisories/30430 · Nota
• http://secunia.com/advisories/29130 · Nota
• http://kb.cert.org/vuls/id/110947 · Nota