CVE-2012-4434

fwknop before 2.0.3 is affected by a vulnerability that lets remote authenticated users cause a denial-of-service (server crash) and possibly execute arbitrary code. Root cause details are not provided in the documents. Upgrade to fwknop 2.0.3 or apply vendor-recommended remediation per the linke...

CVE-2012-4435

CVE-2012-4435 affects fwknop prior to 2.0.3, where IP address validation is insufficient. This can allow remote authenticated users to trigger a denial of service (server crash) by sending a long IP address. The provided documents consistently describe the vulnerability in fwknop

CVE-2012-4436

The CVE-2012-4436 issue affects fwknop prior to version 2.0.3, where a buffer overflow in run_last_args (client/fwknop.c) can be triggered when processing --last. This flaw may allow local attackers to cause a denial of service (client crash) and potentially execute arbitrary code via many .fwkno...