[Forgot Password]
Login  Register Subscribe

23631

 
 

126173

 
 

98218

 
 

909

 
 

79224

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2008-1673

Date: (C)2008-06-09   (M)2017-11-18 


The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.

CVSS Score: 10.0Access Vector: NETWORK
Exploit Score: 10.0Access Complexity: LOW
Impact Score: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
SECTRACK-1020210
http://www.securityfocus.com/archive/1/archive/1/493300/100/0/threaded
BID-29589
SECUNIA-30000
SECUNIA-30580
SECUNIA-30644
SECUNIA-30658
SECUNIA-30982
SECUNIA-31107
SECUNIA-31836
SECUNIA-32103
SECUNIA-32104
SECUNIA-32370
SECUNIA-32759
ADV-2008-1770
FEDORA-2008-5308
MDVSA-2008:113
MDVSA-2008:174
SUSE-SA:2008:035
SUSE-SA:2008:038
SUSE-SA:2008:047
SUSE-SA:2008:048
SUSE-SA:2008:049
SUSE-SA:2008:052
SUSE-SR:2008:025
USN-625-1
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ddb2c43594f22843e9f3153da151deaba1a834c5
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0189
https://bugzilla.redhat.com/show_bug.cgi?id=443962
kernel-ber-decoder-bo(42921)
linux-kernel-ber-decoder-bo(42921)

CPE    245
cpe:/o:debian:debian_linux:4.0
cpe:/o:linux:linux_kernel:2.4.27:pre5
cpe:/o:linux:linux_kernel:2.4.27:pre4
cpe:/o:linux:linux_kernel:2.4.27:pre1
...
CWE    1
CWE-119
OVAL    2
oval:org.secpod.oval:def:301538
oval:org.mitre.oval:def:8118

© 2013 SecPod Technologies