Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2004-0982HistoryFeb 09, 2005 - 5:00 a.m.
CVE-2004-0982
2005-02-0905:00:00
Debian Security Bug Tracker
security-tracker.debian.org
5
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.037 Low
EPSS
Percentile
91.9%
Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | mpg123 | < 0.59r-18 | mpg123_0.59r-18_all.deb |
| Debian | 11 | all | mpg123 | < 0.59r-18 | mpg123_0.59r-18_all.deb |
| Debian | 999 | all | mpg123 | < 0.59r-18 | mpg123_0.59r-18_all.deb |
| Debian | 13 | all | mpg123 | < 0.59r-18 | mpg123_0.59r-18_all.deb |
Related
freebsd
freebsd
mpg123 -- buffer overflow in URL handling
2004-10-02 00:00:00
gentoo
gentoo
mpg123: Buffer overflow vulnerabilities
2004-10-27 00:00:00
openvas
openvas
FreeBSD Ports: mpg123, mpg123-nas, mpg123-esound
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200410-27 (mpg123)
2008-09-24 00:00:00
Debian: Security Advisory (DSA-578-1)
2008-01-17 00:00:00
cvelist
cvelist
CVE-2004-0982
2004-11-19 05:00:00
CVE-2006-3355
2006-07-06 20:00:00
nvd
nvd
CVE-2004-0982
2005-02-09 05:00:00
CVE-2006-3355
2006-07-06 20:05:00
nessus
nessus
Debian DSA-578-1 : mpg123 - buffer overflow
2004-11-10 00:00:00
GLSA-200410-27 : mpg123: Buffer overflow vulnerabilities
2004-10-28 00:00:00
Mandrake Linux Security Advisory : mpg123 (MDKSA-2004:120)
2004-11-02 00:00:00
ubuntucve
ubuntucve
CVE-2004-0982
2005-02-09 00:00:00
CVE-2006-3355
2006-07-06 00:00:00
debian
debian
[SECURITY] [DSA 578-1] New mpg123 packages fix arbitrary code execution
2004-11-01 13:33:16
[SECURITY] [DSA 578-1] New mpg123 packages fix arbitrary code execution
2004-11-01 13:33:16
cve
cve
CVE-2004-0982
2005-02-09 05:00:00
CVE-2006-3355
2006-07-06 20:05:00
osv
osv
mpg123 - buffer overflow
2004-11-01 00:00:00
debiancve
debiancve
CVE-2006-3355
2006-07-06 20:05:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.037 Low
EPSS
Percentile
91.9%
Related for DEBIANCVE:CVE-2004-0982