Lucene search

K
ubuntuUbuntuUSN-845-1
HistoryOct 08, 2009 - 12:00 a.m.

Pan vulnerability

2009-10-0800:00:00
ubuntu.com
34

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.041 Low

EPSS

Percentile

92.2%

Releases

  • Ubuntu 8.04

Packages

  • pan -

Details

Pavel Polischouk discovered that Pan incorrectly handled certain data
structures. If a user were tricked into viewing malicious nntp data, a
remote attacker could cause a denial of service or possibly execute
arbitrary code with the privileges of the user invoking the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchpan<Β 0.132-2ubuntu2.1UNKNOWN

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.041 Low

EPSS

Percentile

92.2%