Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) prior to 2.4.7 allows malicious users to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "[corrupts] security-relevant variables."
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
point-to-point protocol project point-to-point protocol |
Vulmon