PT-2010-4301 · Socat+1 · Socat+1

Felix Gröbert · Published 2010-09-14 · Updated 2012-07-02 · CVE-2010-2799

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Socat versions 1.5.0.0 through 1.7.1.2 Socat versions 2.0.0-b1 through 2.0.0-b3

Description A stack-based buffer overflow issue exists in the nestlex function in nestlex.c, which can be exploited when bidirectional data relay is enabled. This allows attackers to execute arbitrary code via long command-line arguments.

Recommendations For Socat versions 1.5.0.0 through 1.7.1.2, update to a version outside of this range to resolve the issue. For Socat versions 2.0.0-b1 through 2.0.0-b3, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling bidirectional data relay until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-2799

DSA-2090-1

SUSE-SU-2012_0808-1

Affected Products

Socat

Suse

References · 21

• https://security-tracker.debian.org/tracker/CVE-2010-2799 · Vendor Advisory
• http://debian.org/security/2010/dsa-2090 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0219 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2799 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2799 · Vendor Advisory
• http://dest-unreach.org/socat/download/socat-1.7.1.3.patch · Patch
• https://osv.dev/vulnerability/CVE-2010-2799 · Vendor Advisory
• http://dest-unreach.org/socat/contrib/socat-secadv2.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2799 · Security Note
• https://bugzilla.novell.com/627475 · Note
• http://download.novell.com/patch/finder/?keywords=26d6956b5e38b37b8fb00575dde970ba · Note
• https://bugzilla.novell.com/759859 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=620426 · Note
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Note
• http://support.novell.com/security/cve/CVE-2010-2799.html · Note