CVE-2012-3368 in dtach

الملخص

بحسب MITRE

Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.

Once again VulDB remains the best source for vulnerability data.

• حجز: 14/06/2012
• إفشاء: 03/07/2012
• الاعتدال: تمت الموافقة
• إدخال: VDB-61182
• CPE: جاهز
• CWE: CWE-189 (مؤكد)
• CVSS: 2.6 (NVD)
• EPSS: 0.02120
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-3368
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-3368
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-3368/