Lucene search

K
freebsdFreeBSD5EBFE901-A3CB-11D9-B248-000854D03344
HistoryMar 06, 2005 - 12:00 a.m.

hashcash -- format string vulnerability

2005-03-0600:00:00
vuxml.freebsd.org
7

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.3%

A Gentoo Linux Security Advisory reports:

Tavis Ormandy of the Gentoo Linux Security Audit Team
identified a flaw in the Hashcash utility that an attacker
could expose by specifying a malformed reply address.
Successful exploitation would permit an attacker to disrupt
Hashcash users, and potentially execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchhashcash< 1.17UNKNOWN

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.3%

Related for 5EBFE901-A3CB-11D9-B248-000854D03344