NVD

Id
45824  
Name
CVE-2012-4435  
Description
fwknop before 2.0.3 does not properly validate IP addresses, which allows remote authenticated users to cause a denial of service (server crash) via a long IP address.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-10-22  
Modified Date
2013-11-24  
Seq
2012-4435  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230050 45824 CVE-2012-4435 http://www.cipherdyne.org/blog/2012/09/software-release-fwknop-2.0.3.html  View
230051 45824 CVE-2012-4435 http://www.cipherdyne.org/cgi-bin/gitweb.cgi?p=fwknop.git;a=commitdiff;h=263fa01f2af1d336961df320f1c7a9ea84ddac9a  View
230052 45824 CVE-2012-4435 http://www.cipherdyne.org/cgi-bin/gitweb.cgi?p=fwknop.git;a=commitdiff;h=f4c16bc47fc24a96b63105556b62d61c1ba7d799  View
230053 45824 CVE-2012-4435 [oss-security] 20120919 CVE Request -- fwknop 2.0.3: Multiple security issues  View
230054 45824 CVE-2012-4435 [oss-security] 20120919 Re: CVE Request -- fwknop 2.0.3: Multiple security issues  View
230055 45824 CVE-2012-4435 [oss-security] 20120919 Re: CVE Request -- fwknop 2.0.3: Multiple security issues  View
230056 45824 CVE-2012-4435 fwknop-ipaddress-dos(79568)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29380 JVNDB-2012-005087 fwknop におけるサービス運用妨害 (サーバクラッシュ) の脆弱性 fwknop は、IP アドレスを適切に検証しないため、サービス運用妨害 (サーバクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-4435 57673 CVE-2012-4435 45824 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005087.html 2012-09-04 2012-10-24 View