Vulnerability CVE-2010-2799: Information

Description

Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidirectional data relay is enabled, allows context-dependent attackers to execute arbitrary code via long command-line arguments.

Severity: MEDIUM (6.8)

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      cpe:2.3:a:dest-unreach:socat:1.7.1.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:1.7.0.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:1.5.0.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:2.0.0:b3:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:1.6.0.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:1.7.1.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:2.0.0:b2:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:1.6.0.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:2.0.0:b1:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:1.7.0.1:*:*:*:*:*:*:*

      ---