CVE-2008-2149
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.4%
Stack-based buffer overflow in the searchwn function in Wordnet 2.0, 2.1, and 3.0 might allow context-dependent attackers to execute arbitrary code via a long command line option. NOTE: this issue probably does not cross privilege boundaries except in cases in which Wordnet is used as a back end.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordnet:wordnet | wordnet | eq | 2.0 |
| wordnet:wordnet | wordnet | eq | 2.1 |
| wordnet:wordnet | wordnet | eq | 3.0 |
References
secunia.com/advisories/30242
secunia.com/advisories/31654
secunia.com/advisories/32184
www.debian.org/security/2008/dsa-1634
www.gentoo.org/security/en/glsa/glsa-200810-01.xml
www.mandriva.com/security/advisories?name=MDVSA-2008:182
www.securityfocus.com/bid/29208
www.vupen.com/english/advisories/2008/1527/references
bugs.gentoo.org/show_bug.cgi?id=211491
exchange.xforce.ibmcloud.com/vulnerabilities/42378
Related
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.4%