9.8
CVE-2018-20764
- EPSS 1.19%
- Veröffentlicht 08.02.2019 17:29:00
- Zuletzt bearbeitet 21.11.2024 04:02:07
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginA buffer overflow exists in HelpSystems tcpcrypt on Linux, used for BoKS encrypted telnet through BoKS version 6.7.1. Since tcpcrypt is setuid, exploitation leads to privilege escalation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Helpsystems ≫ Boks Version >= 6.6.0 <= 6.7.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.19% | 0.637 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
https://community.helpsystems.com/knowledge-base/fox-technologies/hotfix/515/