Lucene search

RedhatCVE-2010-2523

HistoryJul 13, 2010 - 5:30 p.m.

CVE-2010-2523

2010-07-1317:30:04

CWE-119

redhat

web.nvd.nist.gov

cve-2010-2523

buffer overflow

ha.c

mipv6 daemon

umip 0.4

remote code execution

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.031

Percentile

91.0%

JSON

Multiple buffer overflows in ha.c in the mipv6 daemon in UMIP 0.4 allow remote attackers to have an unspecified impact via a crafted (1) ND_OPT_PREFIX_INFORMATION or (2) ND_OPT_HOME_AGENT_INFO packet.

Affected configurations

Nvd

Node

linux-ipv6umipMatch0.4

VendorProductVersionCPE
linux-ipv6umip0.4cpe:2.3:a:linux-ipv6:umip:0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux-ipv6	umip	0.4	cpe:2.3:a:linux-ipv6:umip:0.4:::::::*

References

lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

marc.info/?l=oss-security&m=127850299910685&w=2

marc.info/?l=oss-security&m=127859390815405&w=2

www.openwall.com/lists/oss-security/2010/07/06/5

www.openwall.com/lists/oss-security/2010/07/07/4

www.openwall.com/lists/oss-security/2010/07/09/1

www.securityfocus.com/bid/41522

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.031

Percentile

91.0%

JSON

Related for CVE-2010-2523