7.2

CVE-2005-0162

EPSS 4.3%
Published 26.01.2005 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code.

Affected products Warnungen 0 Metrics 2 CWE 0 References 12

Data is provided by the National Vulnerability Database (NVD)

Openswan ≫ Openswan Version <= 1.0.9

Xelerance ≫ Openswan Version2.3.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	4.3%	0.878

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://secunia.com/advisories/14038

http://secunia.com/advisories/14062

http://securitytracker.com/id?1013014

http://www.idefense.com/application/poi/display?id=190&type=vulnerabilities

Patch

Vendor Advisory

http://www.openswan.org/support/vuln/IDEF0785/

Patch

Vendor Advisory

http://www.osvdb.org/13195

http://www.redhat.com/archives/fedora-announce-list/2005-January/msg00103.html

http://www.securityfocus.com/bid/12377

https://exchange.xforce.ibmcloud.com/vulnerabilities/19078

https://nvd.nist.gov/vuln/detail/CVE-2005-0162

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-0162

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-0162

EUVD