7.2

CVE-2005-0162

EPSS 4.3%
Veröffentlicht 26.01.2005 05:00:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Openswan ≫ Openswan Version <= 1.0.9

Xelerance ≫ Openswan Version2.3.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.3%	0.878

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/14038

http://secunia.com/advisories/14062

http://securitytracker.com/id?1013014

http://www.idefense.com/application/poi/display?id=190&type=vulnerabilities

Patch

Vendor Advisory

http://www.openswan.org/support/vuln/IDEF0785/

Patch

Vendor Advisory

http://www.osvdb.org/13195

http://www.redhat.com/archives/fedora-announce-list/2005-January/msg00103.html

http://www.securityfocus.com/bid/12377

https://exchange.xforce.ibmcloud.com/vulnerabilities/19078

https://nvd.nist.gov/vuln/detail/CVE-2005-0162

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-0162

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-0162

EUVD