CVE-2011-4093

2014-02-1018:15:00

CWE-190

[email protected]

web.nvd.nist.gov

cve-2011-4093

integer overflow

libnet6

remote attackers

hijack connections

gain privileges

6.8 Medium

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.004 Low

EPSS

Percentile

73.1%

JSON

Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.

CPENameOperatorVersion
oracle:solarisoracle solariseq11.2
armin_burgmeier:net6armin burgmeier net6le1.3.13
armin_burgmeier:net6armin burgmeier net6eq1.3.5
armin_burgmeier:net6armin burgmeier net6eq1.3.9
armin_burgmeier:net6armin burgmeier net6eq1.3.7
armin_burgmeier:net6armin burgmeier net6eq1.3.1
armin_burgmeier:net6armin burgmeier net6eq1.3.12
armin_burgmeier:net6armin burgmeier net6eq1.3.6
armin_burgmeier:net6armin burgmeier net6eq1.3.4
armin_burgmeier:net6armin burgmeier net6eq1.3.2

CPE	Name	Operator	Version
oracle:solaris	oracle solaris	eq	11.2
armin_burgmeier:net6	armin burgmeier net6	le	1.3.13
armin_burgmeier:net6	armin burgmeier net6	eq	1.3.5
armin_burgmeier:net6	armin burgmeier net6	eq	1.3.9
armin_burgmeier:net6	armin burgmeier net6	eq	1.3.7
armin_burgmeier:net6	armin burgmeier net6	eq	1.3.1
armin_burgmeier:net6	armin burgmeier net6	eq	1.3.12
armin_burgmeier:net6	armin burgmeier net6	eq	1.3.6
armin_burgmeier:net6	armin burgmeier net6	eq	1.3.4
armin_burgmeier:net6	armin burgmeier net6	eq	1.3.2