NVD

Id
36639  
Name
CVE-2013-0288  
Description
nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer overflow related to incorrect use of the FD_SET macro.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-03-05  
Modified Date
2014-02-06  
Seq
2013-0288  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187251 36639 CVE-2013-0288 http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=7867b93f9a7c76b96f1571cddc1de0811134bb81  View
187252 36639 CVE-2013-0288 http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=abf03bc54032beeff95b1b8634cc005137e11f32  View
187253 36639 CVE-2013-0288 http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=f266f05f20afe73e89c3946a7bd60bd7c5948e1b  View
187254 36639 CVE-2013-0288 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690319  View
187255 36639 CVE-2013-0288 [nss-pam-ldapd-announce] 20130218 nss-pam-ldapd security advisory (CVE-2013-0288)  View
187256 36639 CVE-2013-0288 FEDORA-2013-2754  View
187257 36639 CVE-2013-0288 openSUSE-SU-2013:0522  View
187258 36639 CVE-2013-0288 openSUSE-SU-2013:0524  View
187259 36639 CVE-2013-0288 RHSA-2013:0590  View
187260 36639 CVE-2013-0288 DSA-2628  View
187261 36639 CVE-2013-0288 MDVSA-2013:106  View
187262 36639 CVE-2013-0288 [oss-security] 20130218 CVE-2013-0288 nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow  View
187263 36639 CVE-2013-0288 58007  View
187264 36639 CVE-2013-0288 nsspamldapd-fdsetsize-bo(82175)  View
187265 36639 CVE-2013-0288 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0288  View
187266 36639 CVE-2013-0288 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0071  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20177 JVNDB-2013-001752 nss-pam-ldapd におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 nss-pam-ldapd には、サービス運用妨害 (アプリケーションクラッシュ) 状態となる、および任意のコードを実行される脆弱性が存在します。 CVE-2013-0288 60230 CVE-2013-0288 36639 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001752.html 2013-02-18 2014-03-28 View