PT-2013-2841 · Cfingerd · Cfingerd
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
cfingerd version 1.4.3-3
Description
The issue is related to a buffer overflow in the RFC1413 (ident) client, which can be triggered by remote IDENT servers sending crafted responses. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code.
Recommendations
For cfingerd version 1.4.3-3, consider disabling the RFC1413 (ident) client functionality until a patch is available to prevent potential exploitation.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cfingerd