Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-5030HistoryNov 10, 2008 - 4:15 p.m.
CVE-2008-5030
2008-11-1016:15:12
Debian Security Bug Tracker
security-tracker.debian.org
13
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.02
Percentile
88.9%
Heap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute arbitrary code via long CDDB data.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libcdaudio | <Β 0.99.12p2-7 | libcdaudio_0.99.12p2-7_all.deb |
| Debian | 11 | all | libcdaudio | <Β 0.99.12p2-7 | libcdaudio_0.99.12p2-7_all.deb |
| Debian | 999 | all | libcdaudio | <Β 0.99.12p2-7 | libcdaudio_0.99.12p2-7_all.deb |
| Debian | 13 | all | libcdaudio | <Β 0.99.12p2-7 | libcdaudio_0.99.12p2-7_all.deb |
Related
prion
prion
Heap overflow
2008-11-10 16:15:00
openvas
openvas
Debian Security Advisory DSA 1665-1 (libcdaudio)
2008-11-19 00:00:00
Gentoo Security Advisory GLSA 200903-31 (libcdaudio)
2009-03-20 00:00:00
Gentoo Security Advisory GLSA 200903-31 (libcdaudio)
2009-03-20 00:00:00
nessus
nessus
GLSA-200903-31 : libcdaudio: User-assisted execution of arbitrary code
2009-03-18 00:00:00
Debian DSA-1665-1 : libcdaudio - heap overflow
2008-11-13 00:00:00
cve
cve
CVE-2008-5030
2008-11-10 16:15:12
seebug
seebug
libcdaudio cddb.cθΏη¨ε ζΊ’εΊζΌζ΄
2008-11-12 00:00:00
debian
debian
[SECURITY] [DSA 1665-1] New libcdaudio packages fix arbitrary code execution
2008-11-12 22:30:18
gentoo
gentoo
libcdaudio: User-assisted execution of arbitrary code
2009-03-17 00:00:00
cvelist
cvelist
CVE-2008-5030
2008-11-10 16:00:00
nvd
nvd
CVE-2008-5030
2008-11-10 16:15:12
ubuntucve
ubuntucve
CVE-2008-5030
2008-11-10 00:00:00
freebsd
freebsd
libcdaudio -- remote buffer overflow and code execution
2008-11-05 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.02
Percentile
88.9%
Related for DEBIANCVE:CVE-2008-5030