NVD

Id
45825  
Name
CVE-2012-4436  
Description
Buffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service (client crash) and possibly execute arbitrary code via many .fwknop.run arguments.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-10-22  
Modified Date
2012-11-08  
Seq
2012-4436  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230057 45825 CVE-2012-4436 http://www.cipherdyne.org/blog/2012/09/software-release-fwknop-2.0.3.html  View
230058 45825 CVE-2012-4436 http://www.cipherdyne.org/cgi-bin/gitweb.cgi?p=fwknop.git;a=commitdiff;h=a60f05ad44e824f6230b22f8976399340cb535dc  View
230059 45825 CVE-2012-4436 [oss-security] 20120919 CVE Request -- fwknop 2.0.3: Multiple security issues  View
230060 45825 CVE-2012-4436 [oss-security] 20120919 Re: CVE Request -- fwknop 2.0.3: Multiple security issues  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29381 JVNDB-2012-005088 fwknop の client/fwknop.c におけるバッファオーバーフローの脆弱性 fwknop の client/fwknop.c 内の run_last_args 関数には、--last の処理の際、バッファオーバーフローの脆弱性が存在します。 CVE-2012-4436 57674 CVE-2012-4436 45825 4.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005088.html 2012-09-04 2012-10-24 View