CVEvulnerability
CVE-2012-3368
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-189
Description
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
Affected configurations
• redhat dtach 0.8
Related
Weakness · not in database (1)
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=625302 bugs.debian.org
- http://sourceforge.net/tracker/?func=detail&aid=3517812&group_id=36489&atid=417357 Exploit
- http://sourceforge.net/tracker/download.php?group_id=36489&atid=417357&file_id=441195&aid=3517812 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=812551 Exploit
- https://bugzilla.redhat.com/show_bug.cgi?id=835849 bugzilla.redhat.com
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=625302 bugs.debian.org
- http://sourceforge.net/tracker/?func=detail&aid=3517812&group_id=36489&atid=417357 Exploit
- http://sourceforge.net/tracker/download.php?group_id=36489&atid=417357&file_id=441195&aid=3517812 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=812551 Exploit
- https://bugzilla.redhat.com/show_bug.cgi?id=835849 bugzilla.redhat.com