CVE-2011-4620

2011-12-3100:00:00

ubuntu.com

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.385

Percentile

97.3%

JSON

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB
1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted
remote attackers to execute arbitrary code via vectors involving a long
error message, as demonstrated by a crafted acc file for TORCS. NOTE: some
of these details are obtained from third party information.

Notes

Author	Note
tyhicks	The flaw is only in plib, which is used by torcs.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchplib< 1.8.5-5+squeeze1build0.10.04.1UNKNOWN
ubuntu10.10noarchplib< 1.8.5-5+squeeze1build0.10.10.1UNKNOWN
ubuntu11.04noarchplib< 1.8.5-5+squeeze1build0.11.04.1UNKNOWN
ubuntu11.10noarchplib< 1.8.5-5+squeeze1build0.11.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	plib	< 1.8.5-5+squeeze1build0.10.04.1	UNKNOWN
ubuntu	10.10	noarch	plib	< 1.8.5-5+squeeze1build0.10.10.1	UNKNOWN
ubuntu	11.04	noarch	plib	< 1.8.5-5+squeeze1build0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	plib	< 1.8.5-5+squeeze1build0.11.10.1	UNKNOWN