CVEvulnerability
CVE-2011-4093
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-02-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-190
Description
Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.
Affected configurations
• oracle solaris 11.2
• armin burgmeier net6 (<= 1.3.13)
• armin burgmeier net6 1.3.1
• armin burgmeier net6 1.3.2
• armin burgmeier net6 1.3.3
• armin burgmeier net6 1.3.4
• armin burgmeier net6 1.3.5
• armin burgmeier net6 1.3.6
• armin burgmeier net6 1.3.7
• armin burgmeier net6 1.3.8
• armin burgmeier net6 1.3.9
• armin burgmeier net6 1.3.10
• armin burgmeier net6 1.3.11
• armin burgmeier net6 1.3.12
• opensuse opensuse 11.3
• opensuse project opensuse 11.4
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=ac61d7fb42a1f977fb527e024bede319c4a9e169%3Bhp=08c8e2261604c6fcbbaf62f9ae9d13f7015fcb9a git.0x539.de
- http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html Third Party Advisory
- http://www.openwall.com/lists/oss-security/2011/10/31/1 Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html Third Party Advisory
- https://bugzilla.novell.com/show_bug.cgi?id=727710 Issue Tracking, Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=750631 Issue Tracking, Third Party Advisory, VDB Entry
- http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=ac61d7fb42a1f977fb527e024bede319c4a9e169%3Bhp=08c8e2261604c6fcbbaf62f9ae9d13f7015fcb9a git.0x539.de
- http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html Third Party Advisory
- http://www.openwall.com/lists/oss-security/2011/10/31/1 Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html Third Party Advisory
- https://bugzilla.novell.com/show_bug.cgi?id=727710 Issue Tracking, Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=750631 Issue Tracking, Third Party Advisory, VDB Entry