Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.121071
Category:Gentoo Local Security Checks
Title:Gentoo Security Advisory GLSA 201311-12
Summary:Gentoo Linux Local Security Checks GLSA 201311-12
Description:Summary:
Gentoo Linux Local Security Checks GLSA 201311-12

Vulnerability Insight:
A stack-based buffer overflow flaw has been discovered in the way Open DC Hub sanitized content of a users MyINFO message.

Solution:
Update the affected packages to the latest available version.

CVSS Score:
6.0

CVSS Vector:
AV:N/AC:M/Au:S/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2010-1147
20100331 OpenDcHub 0.8.1 Remote Code Execution Exploit
http://www.securityfocus.com/archive/1/510428
39129
http://www.securityfocus.com/bid/39129
39664
http://secunia.com/advisories/39664
ADV-2010-1023
http://www.vupen.com/english/advisories/2010/1023
ADV-2010-1044
http://www.vupen.com/english/advisories/2010/1044
FEDORA-2010-6415
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040380.html
FEDORA-2010-6426
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040421.html
FEDORA-2010-6478
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040360.html
[oss-security] 20100403 CVE Request -- OpenDCHub v0.8.1 -- Stack overflow by handling a specially-crafted MyINFO message
http://openwall.com/lists/oss-security/2010/04/03/1
[oss-security] 20100406 Re: CVE Request -- OpenDCHub v0.8.1 -- Stack overflow by handling a specially-crafted MyINFO message
http://marc.info/?l=oss-security&m=127051570728944&w=2
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576308
http://www.indahax.com/exploits/opendchub-0-8-1-remote-code-execution-exploit#more-600
https://bugzilla.redhat.com/show_bug.cgi?id=579206
CopyrightCopyright (C) 2015 Eero Volotinen

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.