Lucene search
HistoryJan 01, 2006 - 11:00 p.m.
CVE-2005-4594
cve-2005-4594
tugzip
buffer overflow
remote code execution
arj archive
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.139 Low
EPSS
Percentile
95.7%
Stack-based buffer overflow in TUGZip 3.4.0.0 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive.
Affected configurations
Node
tugziptugzipMatch3.4.0.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| tugzip:tugzip | tugzip | eq | 3.4.0.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.139 Low
EPSS
Percentile
95.7%
Related for CVE-2005-4594