Уязвимость CVE-2010-2799: Информация

Описание

Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidirectional data relay is enabled, allows context-dependent attackers to execute arbitrary code via long command-line arguments.

Важность: MEDIUM (6,8)

Ссылки на рекомендации, решения и инструменты

1. Подверженные конфигурации:

   1. Конфигурация 1

      cpe:2.3:a:dest-unreach:socat:1.7.1.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:1.7.0.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:1.5.0.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:2.0.0:b3:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:1.6.0.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:1.7.1.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:2.0.0:b2:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:1.6.0.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:2.0.0:b1:*:*:*:*:*:*

      ---

      cpe:2.3:a:dest-unreach:socat:1.7.0.1:*:*:*:*:*:*:*

      ---