7.2

CVE-2005-0162

Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openswan ≫ Openswan Version <= 1.0.9
Xelerance ≫ Openswan Version2.3.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.69% 0.741
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/14038
http://secunia.com/advisories/14062
http://securitytracker.com/id?1013014
http://www.idefense.com/application/poi/display?id=190&type=vulnerabilities
Patch
Vendor Advisory
http://www.openswan.org/support/vuln/IDEF0785/
Patch
Vendor Advisory
http://www.osvdb.org/13195
http://www.redhat.com/archives/fedora-announce-list/2005-January/msg00103.html
http://www.securityfocus.com/bid/12377
https://exchange.xforce.ibmcloud.com/vulnerabilities/19078