PT-2010-4079 · Umip · Umip

Sebastian Krahmer · Published 2010-07-13 · Updated 2024-06-15 · CVE-2010-2523

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UMIP version 0.4

Description The issue concerns multiple buffer overflows in the ha.c file of the mipv6 daemon. These overflows can be triggered by remote attackers sending crafted packets, specifically (1) ND OPT PREFIX INFORMATION or (2) ND OPT HOME AGENT INFO packets. The impact of these overflows is not explicitly specified.

Recommendations For UMIP version 0.4, consider disabling the mipv6 daemon until a patch is available to prevent potential exploitation of the buffer overflows in the ha.c file. Restrict access to the network to minimize the risk of receiving crafted packets.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-2523

OPENSUSE-SU-2024:10465-1

Affected Products

Umip

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2010-2523 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2010/07/06/5 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2024:10465-1 · Vendor Advisory
• http://marc.info/?l=oss-security&m=127850299910685&w=2 · Note
• http://securityfocus.com/bid/41522 · Note
• http://openwall.com/lists/oss-security/2010/07/07/4 · Note
• http://openwall.com/lists/oss-security/2010/07/09/1 · Note
• https://suse.com/security/cve/CVE-2010-2523 · Note
• https://suse.com/security/cve/CVE-2010-2522 · Note
• http://marc.info/?l=oss-security&m=127859390815405&w=2 · Note