4 matches found
PT-2024-36396 · Socat +8 · Socat +8
Name of the Vulnerable Software and Affected Versions: socat versions prior to 1.8.0.2 Description: The issue is related to the readline.sh file in socat, which relies on the /tmp/$USER/stderr2 file. This can lead to an arbitrary file overwrite via a predictable /tmp directory. Recommendations: F...
socat security vulnerabilities
Buffer overflow, file descriptor leakage...
CVE-2004-1484
Format string vulnerability in the msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message...
socat format string bug
syslog format string bug with -ly option...