CVE-2013-1049

2013-03-1403:13:16

Debian Security Bug Tracker

security-tracker.debian.org

buffer overflow

cfingerd

ident client

denial of service

remote execution

unix

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.008

Percentile

82.2%

JSON

Buffer overflow in the RFC1413 (ident) client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted response.

OSVersionArchitecturePackageVersionFilename
Debian12allcfingerd< 1.4.3-3.1cfingerd_1.4.3-3.1_all.deb
Debian11allcfingerd< 1.4.3-3.1cfingerd_1.4.3-3.1_all.deb
Debian999allcfingerd< 1.4.3-3.1cfingerd_1.4.3-3.1_all.deb
Debian13allcfingerd< 1.4.3-3.1cfingerd_1.4.3-3.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	cfingerd	< 1.4.3-3.1	cfingerd_1.4.3-3.1_all.deb
Debian	11	all	cfingerd	< 1.4.3-3.1	cfingerd_1.4.3-3.1_all.deb
Debian	999	all	cfingerd	< 1.4.3-3.1	cfingerd_1.4.3-3.1_all.deb
Debian	13	all	cfingerd	< 1.4.3-3.1	cfingerd_1.4.3-3.1_all.deb