PT-2010-4301 · Socat+1 · Socat+1
Felix Gröbert
·
Publicado
2010-09-14
·
Atualizado
2012-07-02
·
CVE-2010-2799
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Socat versions 1.5.0.0 through 1.7.1.2
Socat versions 2.0.0-b1 through 2.0.0-b3
Description
A stack-based buffer overflow issue exists in the nestlex function in nestlex.c, which can be exploited when bidirectional data relay is enabled. This allows attackers to execute arbitrary code via long command-line arguments.
Recommendations
For Socat versions 1.5.0.0 through 1.7.1.2, update to a version outside of this range to resolve the issue.
For Socat versions 2.0.0-b1 through 2.0.0-b3, update to a version outside of this range to resolve the issue.
As a temporary workaround, consider disabling bidirectional data relay until a patch is available.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Socat
Suse