Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2012-1502
HistoryJun 16, 2012 - 12:55 a.m.

CVE-2012-1502

2012-06-1600:55:06
CWE-399
mitre
web.nvd.nist.gov
47
cve-2012-1502
pypam
pammodule.c
pypam 0.5.0
vulnerability
remote attack
denial of service
arbitrary code
null byte

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.502

Percentile

97.5%

JSON

Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a NULL byte in a password string.

Affected configurations

Nvd
Node
pypampypamRange≤0.5.0
VendorProductVersionCPE
pypampypam*cpe:2.3:a:pypam:pypam:*:*:*:*:*:*:*:*

Related

packetstorm 1
prion 1
debian 1
openvas 7
gentoo 1
securityvulns 3
nessus 7
ubuntu 1
zdt 1
debiancve 1
cvelist 1
exploitpack 1
seebug 1
nvd 1
ubuntucve 1
exploitdb 1
packetstorm
packetstorm
PyPAM 0.4.2 Double-Free Corruption
2012-03-09 00:00:00
prion
prion
Double free
2012-06-16 00:55:00
debian
debian
[SECURITY] [DSA 2430-1] python-pam security update
2012-03-10 15:51:34
openvas
openvas
Debian Security Advisory DSA 2430-1 (python-pam)
2012-04-30 00:00:00
Gentoo Security Advisory GLSA 201507-09
2015-09-29 00:00:00
Ubuntu Update for python-pam USN-1395-1
2012-03-09 00:00:00
gentoo
gentoo
PyPAM: Arbitrary code execution
2015-07-09 00:00:00
securityvulns
securityvulns
[USN-1395-1] PyPAM vulnerability
2012-03-10 00:00:00
LSE-2012-03-01: PyPAM -- Python bindings for PAM - Double Free Corruption
2012-03-10 00:00:00
python-pam memory corruption
2012-03-10 00:00:00
nessus
nessus
SuSE 11.1 Security Update : python-pam (SAT Patch Number 6025)
2013-01-25 00:00:00
SuSE 10 Security Update : python-pam (ZYPP Patch Number 8031)
2012-05-30 00:00:00
RHEL 6 : pypam (Unpatched Vulnerability)
2024-06-03 00:00:00
ubuntu
ubuntu
PyPAM vulnerability
2012-03-08 00:00:00
zdt
zdt
PyPAM Python bindings for PAM Double Free Corruption
2012-03-10 00:00:00
debiancve
debiancve
CVE-2012-1502
2012-06-16 00:55:06
cvelist
cvelist
CVE-2012-1502
2012-06-16 00:00:00
exploitpack
exploitpack
PyPAM Python bindings for PAM - Double-Free Corruption
2012-03-10 00:00:00
seebug
seebug
PyPAM - Python bindings for PAM - Double Free Corruption
2014-07-01 00:00:00
nvd
nvd
CVE-2012-1502
2012-06-16 00:55:06
ubuntucve
ubuntucve
CVE-2012-1502
2012-03-08 00:00:00
exploitdb
exploitdb
PyPAM Python bindings for PAM - Double-Free Corruption
2012-03-10 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

Low

EPSS

0.502

Percentile

97.5%

JSON
Related for CVE-2012-1502
packetstorm1prion1debian1openvas7gentoo1securityvulns3nessus7ubuntu1zdt1debiancve1cvelist1exploitpack1seebug1nvd1ubuntucve1exploitdb1