Lucene search

K
osvGoogleOSV:DSA-1317-1
HistoryJun 23, 2007 - 12:00 a.m.

tinymux

2007-06-2300:00:00
Google
osv.dev
3

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

duskwave discovered that tinymux, a text-based multi-user virtual world server,
performs insufficient boundary checks when working with user-supplied data,
which might lead to the execution of arbitrary code.

For the stable distribution (etch), this problem has been fixed in version
2.4.3.31-1etch1.

We recommend that you upgrade your tinymux package.

CPENameOperatorVersion
tinymuxeq2.4.3.31-1

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C