Integer overflow in the load_iface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attackers to execute arbitrary code via a (1) file or (2) socket that provides configuration data with many entries, leading to a heap-based buffer overflow.

The remote host is affected by the vulnerability described in GLSA-201401-12 (GNUstep Base library: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in GNUstep Base library.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A context-dependent attacker could possibly execute arbitrary code. A       local attacker could possibly read arbitrary files.
  Workaround :

    There is no known workaround at this time.

Fix CVE-2010-1457 and CVE-2010-1602

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2010-1457 and CVE-2010-1602.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
72051	GLSA-201401-12 : GNUstep Base library: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
47503	Fedora 12 : gnustep-base-1.18.0-9.fc12 (2010-8575)	Nessus	Fedora Local Security Checks	high
47502	Fedora 13 : gnustep-base-1.18.0-9.fc13 (2010-8562)	Nessus	Fedora Local Security Checks	high
47500	Fedora 11 : gnustep-base-1.18.0-9.fc11 (2010-8554)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2010-1620

high

Tenable Plugins

high

high

high

high