NVD

Id
47384  
Name
CVE-2009-0036  
Description
Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-02-11  
Modified Date
2010-08-21  
Seq
2009-0036  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
237023 47384 CVE-2009-0036 http://git.et.redhat.com/?p=libvirt.git;a=commitdiff;h=2bb0657e28  View
237024 47384 CVE-2009-0036 [oss-security] 20090210 libvirt_proxy heads up  View
237025 47384 CVE-2009-0036 oval:org.mitre.oval:def:10127  View
237026 47384 CVE-2009-0036 RHSA-2009:0382  View
237027 47384 CVE-2009-0036 33724  View
237028 47384 CVE-2009-0036 https://bugzilla.redhat.com/show_bug.cgi?id=484947  View
237029 47384 CVE-2009-0036 [libvir-list] 20090127 [libvirt] [PATCH] proxy: Fix use of uninitalized memory  View
237030 47384 CVE-2009-0036 [libvir-list] 20090128 Re: [libvirt] [PATCH] proxy: Fix use of uninitalized memory  View
237031 47384 CVE-2009-0036 [libvir-list] 20090128 Re: [libvirt] [PATCH] proxy: Fix use of uninitalized memory  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40137 JVNDB-2009-001143 libvirt の proxyReadClientSocket 関数におけるバッファオーバーフローの脆弱性 libvirt の proxy/libvirt_proxy.c における proxyReadClientSocket 関数には、virProxyPacket パケットのヘッダ部分の処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2009-0036 37467 CVE-2009-0036 47384 4.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001143.html 2009-02-11 2009-05-28 View