Lucene search

K
jvnJapan Vulnerability NotesJVN:34790526
HistoryFeb 27, 2015 - 12:00 a.m.

JVN#34790526: checkpw vulnerable to denial-of-service (DoS)

2015-02-2700:00:00
Japan Vulnerability Notes
jvn.jp
10

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.6%

checkpw is a password authentication program. checkpw contains a denial-of-service (DoS) vulnerability due to a flaw in processing account names (CWE-400).

Impact

A remote attacker may be able to cause a denial-of-service (DoS).

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

  • checkpw-1.02 and earlier

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.6%