10

CVE-2004-1701

Exploit

Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication.

Data is provided by the National Vulnerability Database (NVD)
Gnu ≫ Cfengine Version2.0.0
Gnu ≫ Cfengine Version2.0.1
Gnu ≫ Cfengine Version2.0.2
Gnu ≫ Cfengine Version2.0.3
Gnu ≫ Cfengine Version2.0.4
Gnu ≫ Cfengine Version2.0.5
Gnu ≫ Cfengine Version2.0.5 Updateb1
Gnu ≫ Cfengine Version2.0.5 Updatepre
Gnu ≫ Cfengine Version2.0.5 Updatepre2
Gnu ≫ Cfengine Version2.0.6
Gnu ≫ Cfengine Version2.0.7
Gnu ≫ Cfengine Version2.0.7 Updatep1
Gnu ≫ Cfengine Version2.0.7 Updatep2
Gnu ≫ Cfengine Version2.0.7 Updatep3
Gnu ≫ Cfengine Version2.0.8
Gnu ≫ Cfengine Version2.0.8 Updatep1
Gnu ≫ Cfengine Version2.1.0 Updatea6
Gnu ≫ Cfengine Version2.1.0 Updatea8
Gnu ≫ Cfengine Version2.1.0 Updatea9
Gnu ≫ Cfengine Version2.1.7 Updatep1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 56.76% 0.979
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
http://www.securityfocus.com/bid/10899
Patch
Vendor Advisory
Exploit