Lucene search
MitreCVE-2008-7232HistorySep 14, 2009 - 2:30 p.m.
CVE-2008-7232
2009-09-1414:30:00
CWE-119
mitre
web.nvd.nist.gov
23
cve-2008-7232
buffer overflow
xtacacsd
arbitrary code execution
remote attackers
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8.1
Confidence
Low
EPSS
0.505
Percentile
97.5%
Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command.
Affected configurations
Node
netplex-techxtacacsdRange≤4.1.2
ORnetplex-techxtacacsdMatch2.0
ORnetplex-techxtacacsdMatch3.0
ORnetplex-techxtacacsdMatch3.1
ORnetplex-techxtacacsdMatch3.2
ORnetplex-techxtacacsdMatch3.3
ORnetplex-techxtacacsdMatch3.4
ORnetplex-techxtacacsdMatch3.5
ORnetplex-techxtacacsdMatch4.0
ORnetplex-techxtacacsdMatch4.1
ORnetplex-techxtacacsdMatch4.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| netplex-tech | xtacacsd | * | cpe:2.3:a:netplex-tech:xtacacsd:*:*:*:*:*:*:*:* |
| netplex-tech | xtacacsd | 2.0 | cpe:2.3:a:netplex-tech:xtacacsd:2.0:*:*:*:*:*:*:* |
| netplex-tech | xtacacsd | 3.0 | cpe:2.3:a:netplex-tech:xtacacsd:3.0:*:*:*:*:*:*:* |
| netplex-tech | xtacacsd | 3.1 | cpe:2.3:a:netplex-tech:xtacacsd:3.1:*:*:*:*:*:*:* |
| netplex-tech | xtacacsd | 3.2 | cpe:2.3:a:netplex-tech:xtacacsd:3.2:*:*:*:*:*:*:* |
| netplex-tech | xtacacsd | 3.3 | cpe:2.3:a:netplex-tech:xtacacsd:3.3:*:*:*:*:*:*:* |
| netplex-tech | xtacacsd | 3.4 | cpe:2.3:a:netplex-tech:xtacacsd:3.4:*:*:*:*:*:*:* |
| netplex-tech | xtacacsd | 3.5 | cpe:2.3:a:netplex-tech:xtacacsd:3.5:*:*:*:*:*:*:* |
| netplex-tech | xtacacsd | 4.0 | cpe:2.3:a:netplex-tech:xtacacsd:4.0:*:*:*:*:*:*:* |
| netplex-tech | xtacacsd | 4.1 | cpe:2.3:a:netplex-tech:xtacacsd:4.1:*:*:*:*:*:*:* |
Related
prion
prion
Buffer overflow
2009-09-14 14:30:00
exploitdb
exploitdb
Xtacacsd 4.1.2 - 'report()' Remote Buffer Overflow (Metasploit)
2008-01-08 00:00:00
XTACACSD <= 4.1.2 report Buffer Overflow
2010-05-09 00:00:00
seebug
seebug
Xtacacsd <= 4.1.2 report Buffer Overflow
2008-01-08 00:00:00
nvd
nvd
CVE-2008-7232
2009-09-14 14:30:00
metasploit
metasploit
XTACACSD report() Buffer Overflow
2008-02-02 16:06:39
packetstorm
packetstorm
XTACACSD 4.1.2 Buffer Overflow
2009-10-27 00:00:00
cvelist
cvelist
CVE-2008-7232
2009-09-14 14:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
8.1
Confidence
Low
EPSS
0.505
Percentile
97.5%
Related for CVE-2008-7232