7.2

CVE-2004-1076

Exploit
Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Atari800 ≫ Atari800 Version 0.5.4
Atari800 ≫ Atari800 Version 0.6
Atari800 ≫ Atari800 Version 0.6.2
Atari800 ≫ Atari800 Version 0.7
Atari800 ≫ Atari800 Version 0.8.1
Atari800 ≫ Atari800 Version 0.8.2
Atari800 ≫ Atari800 Version 0.8.6
Atari800 ≫ Atari800 Version 0.8.7
Atari800 ≫ Atari800 Version 0.8.8
Atari800 ≫ Atari800 Version 0.8.9
Atari800 ≫ Atari800 Version 0.9
Atari800 ≫ Atari800 Version 0.9.1
Atari800 ≫ Atari800 Version 0.9.2
Atari800 ≫ Atari800 Version 0.9.3
Atari800 ≫ Atari800 Version 0.9.4
Atari800 ≫ Atari800 Version 0.9.5
Atari800 ≫ Atari800 Version 0.9.6
Atari800 ≫ Atari800 Version 0.9.7
Atari800 ≫ Atari800 Version 0.9.8
Atari800 ≫ Atari800 Version 0.9.9
Atari800 ≫ Atari800 Version 0.9.9a
Atari800 ≫ Atari800 Version 0.9.9b
Atari800 ≫ Atari800 Version 0.9.9c
Atari800 ≫ Atari800 Version 0.9.9d
Atari800 ≫ Atari800 Version 0.9.9e
Atari800 ≫ Atari800 Version 0.9.9f
Atari800 ≫ Atari800 Version 0.9.9g
Atari800 ≫ Atari800 Version 0.9.9h
Atari800 ≫ Atari800 Version 0.9.9i
Atari800 ≫ Atari800 Version 0.9.9j
Atari800 ≫ Atari800 Version 1.0
Atari800 ≫ Atari800 Version 1.0.1
Atari800 ≫ Atari800 Version 1.0.2
Atari800 ≫ Atari800 Version 1.0.3
Atari800 ≫ Atari800 Version 1.0.4
Atari800 ≫ Atari800 Version 1.0.5
Atari800 ≫ Atari800 Version 1.0.6
Atari800 ≫ Atari800 Version 1.0.7
Atari800 ≫ Atari800 Version 1.2
Atari800 ≫ Atari800 Version 1.2.1
Atari800 ≫ Atari800 Version 1.2.1_pre0
Atari800 ≫ Atari800 Version 1.2.2
Atari800 ≫ Atari800 Version 1.2.3
Atari800 ≫ Atari800 Version 1.2.4
Atari800 ≫ Atari800 Version 1.2.5
Atari800 ≫ Atari800 Version 1.2_pre0
Atari800 ≫ Atari800 Version 1.3
Debian ≫ Debian Linux Version 3.0 Edition alpha
Debian ≫ Debian Linux Version 3.0 Edition arm
Debian ≫ Debian Linux Version 3.0 Edition hppa
Debian ≫ Debian Linux Version 3.0 Edition ia-32
Debian ≫ Debian Linux Version 3.0 Edition ia-64
Debian ≫ Debian Linux Version 3.0 Edition m68k
Debian ≫ Debian Linux Version 3.0 Edition mips
Debian ≫ Debian Linux Version 3.0 Edition mipsel
Debian ≫ Debian Linux Version 3.0 Edition ppc
Debian ≫ Debian Linux Version 3.0 Edition s-390
Debian ≫ Debian Linux Version 3.0 Edition sparc
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.65% 0.464
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://cvs.sourceforge.net/viewcvs.py/atari800/atari800/DOC/ChangeLog?view=markup
http://marc.info/?l=bugtraq&m=110142899319841&w=2
http://marc.info/?l=bugtraq&m=110149441815270&w=2
http://secunia.com/advisories/13670/
http://www.debian.org/security/2004/dsa-609
http://www.osvdb.org/12610
http://www.securityfocus.com/bid/11756
Patch
Vendor Advisory
Exploit