Lucene search

[email protected]CVE-2004-1701

HistoryFeb 21, 2005 - 5:00 a.m.

CVE-2004-1701

2005-02-2105:00:00

[email protected]

web.nvd.nist.gov

cve-2004-1701

buffer overflow

authenticationdialogue

cfengine

remote code execution

rsa authentication

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.133 Low

EPSS

Percentile

95.6%

JSON

Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication.

Affected configurations

NVD

Node

gnucfengineMatch2.0.0

gnucfengineMatch2.0.1

gnucfengineMatch2.0.2

gnucfengineMatch2.0.3

gnucfengineMatch2.0.4

gnucfengineMatch2.0.5

gnucfengineMatch2.0.5b1

gnucfengineMatch2.0.5pre

gnucfengineMatch2.0.5pre2

gnucfengineMatch2.0.6

gnucfengineMatch2.0.7

gnucfengineMatch2.0.7p1

gnucfengineMatch2.0.7p2

gnucfengineMatch2.0.7p3

gnucfengineMatch2.0.8

gnucfengineMatch2.0.8p1

gnucfengineMatch2.1.0a6

gnucfengineMatch2.1.0a8

gnucfengineMatch2.1.0a9

gnucfengineMatch2.1.7p1

CPENameOperatorVersion
gnu:cfenginegnu cfengineeq2.0.0
gnu:cfenginegnu cfengineeq2.0.1
gnu:cfenginegnu cfengineeq2.0.2
gnu:cfenginegnu cfengineeq2.0.3
gnu:cfenginegnu cfengineeq2.0.4
gnu:cfenginegnu cfengineeq2.0.5
gnu:cfenginegnu cfengineeq2.0.6
gnu:cfenginegnu cfengineeq2.0.7
gnu:cfenginegnu cfengineeq2.0.8
gnu:cfenginegnu cfengineeq2.1.0

CPE	Name	Operator	Version
gnu:cfengine	gnu cfengine	eq	2.0.0
gnu:cfengine	gnu cfengine	eq	2.0.1
gnu:cfengine	gnu cfengine	eq	2.0.2
gnu:cfengine	gnu cfengine	eq	2.0.3
gnu:cfengine	gnu cfengine	eq	2.0.4
gnu:cfengine	gnu cfengine	eq	2.0.5
gnu:cfengine	gnu cfengine	eq	2.0.6
gnu:cfengine	gnu cfengine	eq	2.0.7
gnu:cfengine	gnu cfengine	eq	2.0.8
gnu:cfengine	gnu cfengine	eq	2.1.0