7.2

CVE-2005-0162

EPSS 4.3%
Veröffentlicht 26.01.2005 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Openswan ≫ Openswan Version <= 1.0.9

Xelerance ≫ Openswan Version2.3.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.3%	0.878

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://secunia.com/advisories/14038

http://secunia.com/advisories/14062

http://securitytracker.com/id?1013014

http://www.idefense.com/application/poi/display?id=190&type=vulnerabilities

Patch

Vendor Advisory

http://www.openswan.org/support/vuln/IDEF0785/

Patch

Vendor Advisory

http://www.osvdb.org/13195

http://www.redhat.com/archives/fedora-announce-list/2005-January/msg00103.html

http://www.securityfocus.com/bid/12377

https://exchange.xforce.ibmcloud.com/vulnerabilities/19078

https://nvd.nist.gov/vuln/detail/CVE-2005-0162

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-0162

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-0162

EUVD