Null pointer dereference

2008-07-2516:41:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.091 Low

EPSS

Percentile

94.7%

JSON

ZDaemon 1.08.07 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted type 6 command, which triggers a NULL pointer dereference.

CPENameOperatorVersion
zdaemoneq1.08.04
zdaemoneq1.08.06
zdaemoneq1.08.01
zdaemoneq1.08.03
zdaemoneq1.08
zdaemonle1.08.07
zdaemoneq1.08.02
zdaemoneq1.08.05

Name	Operator	Version
zdaemon	eq	1.08.04
zdaemon	eq	1.08.06
zdaemon	eq	1.08.01
zdaemon	eq	1.08.03
zdaemon	eq	1.08
zdaemon	le	1.08.07
zdaemon	eq	1.08.02
zdaemon	eq	1.08.05

References

aluigi.altervista.org/adv/zdaemonull-adv.txt

aluigi.org/poc/zdaemonull.zip

secunia.com/advisories/31185

securityreason.com/securityalert/4043

www.securityfocus.com/archive/1/494634/100/0/threaded

www.securityfocus.com/bid/30340

exchange.xforce.ibmcloud.com/vulnerabilities/43946