Published: 09/08/2004 Updated: 11/07/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote malicious users to execute arbitrary code via a long SAUTH command during RSA authentication.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu cfengine 2.0.0
gnu cfengine 2.0.5
gnu cfengine 2.1.0
gnu cfengine 2.0.3
gnu cfengine 2.0.4
gnu cfengine 2.0.7
gnu cfengine 2.0.8
gnu cfengine 2.0.1
gnu cfengine 2.0.2
gnu cfengine 2.0.6
gnu cfengine 2.1.7

source: wwwsecurityfocuscom/bid/10899/info GNU cfengine cfservd is reported prone to a remote heap-based buffer overrun vulnerability The vulnerability presents itself in the cfengine cfservd AuthenticationDialogue() function The issue exists due to a lack of sufficient boundary checks performed on challenge data that is received from ...

source: wwwsecurityfocuscom/bid/10899/info GNU cfengine cfservd is reported prone to a remote heap-based buffer overrun vulnerability The vulnerability presents itself in the cfengine cfservd AuthenticationDialogue() function The issue exists due to a lack of sufficient boundary checks performed on challenge data that is received fro ...

NVD-CWE-Other http://www.coresecurity.com/common/showdoc.php?idx=387&idxseccion=10 http://security.gentoo.org/glsa/glsa-200408-08.xml http://www.securityfocus.com/bid/10899 http://secunia.com/advisories/12251 http://marc.info/?l=bugtraq&m=109208394910086&w=2 http://marc.info/?l=bugtraq&m=110886670528775&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/16935 https://nvd.nist.gov https://www.exploit-db.com/exploits/24360/

CVE-2004-1701

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect