CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
89.0%
Heap-based buffer overflow in the array_push function in hashcash.c for Hashcash before 1.21 might allow attackers to execute arbitrary code via crafted entries.
Vendor | Product | Version | CPE |
---|---|---|---|
hashcash | hashcash | * | cpe:2.3:a:hashcash:hashcash:*:*:*:*:*:*:*:* |
hashcash | hashcash | 1.00 | cpe:2.3:a:hashcash:hashcash:1.00:*:*:*:*:*:*:* |
hashcash | hashcash | 1.01 | cpe:2.3:a:hashcash:hashcash:1.01:*:*:*:*:*:*:* |
hashcash | hashcash | 1.02 | cpe:2.3:a:hashcash:hashcash:1.02:*:*:*:*:*:*:* |
hashcash | hashcash | 1.03 | cpe:2.3:a:hashcash:hashcash:1.03:*:*:*:*:*:*:* |
hashcash | hashcash | 1.04 | cpe:2.3:a:hashcash:hashcash:1.04:*:*:*:*:*:*:* |
hashcash | hashcash | 1.05 | cpe:2.3:a:hashcash:hashcash:1.05:*:*:*:*:*:*:* |
hashcash | hashcash | 1.06 | cpe:2.3:a:hashcash:hashcash:1.06:*:*:*:*:*:*:* |
hashcash | hashcash | 1.07 | cpe:2.3:a:hashcash:hashcash:1.07:*:*:*:*:*:*:* |
hashcash | hashcash | 1.08 | cpe:2.3:a:hashcash:hashcash:1.08:*:*:*:*:*:*:* |
secunia.com/advisories/20800
secunia.com/advisories/20846
secunia.com/advisories/21146
www.debian.org/security/2006/dsa-1114
www.gentoo.org/security/en/glsa/glsa-200606-25.xml
www.hashcash.org/source/CHANGELOG
www.securityfocus.com/bid/18659
www.vupen.com/english/advisories/2006/2551
exchange.xforce.ibmcloud.com/vulnerabilities/27422