Lucene search

K
cve[email protected]CVE-2004-1282
HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1282

2005-01-1005:00:00
web.nvd.nist.gov
28
cve-2004-1282
buffer overflow
strexpand function
linpopup
remote code execution
crafted message
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.05 Low

EPSS

Percentile

92.9%

Buffer overflow in the strexpand function in string.c for LinPopUp 1.2.0 allows remote attackers to execute arbitrary code via a crafted message that is not properly handled during a Reply operation.

Affected configurations

NVD
Node
linpopuplinpopupMatch1.2
CPENameOperatorVersion
linpopup:linpopuplinpopupeq1.2

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.05 Low

EPSS

Percentile

92.9%