Detections
Analytics

FreeBSD : corkscrew -- buffer overflow vulnerability (67a1c3ae-ad69-11df-9be6-0015587e2cc1)

high Nessus Plugin ID 48397

Language:

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

The affected corkscrew versions use sscanf calls without proper bounds checking. In the authentication file parsing routine this can cause an exploitable buffer overflow condition. A similar but issue exists in the server response code but appears to be non-exploitable.

Solution

Update the affected package.

See Also

https://people.freebsd.org/~niels/issues/corkscrew-20100821.txt

http://www.nessus.org/u?f3c8939e

Plugin Details

Severity: High

ID: 48397

File Name: freebsd_pkg_67a1c3aead6911df9be60015587e2cc1.nasl

Version: 1.9

Type: local

Published: 8/23/2010

Updated: 1/6/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/o:freebsd:freebsd, p-cpe:/a:freebsd:freebsd:corkscrew

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 8/21/2010

Vulnerability Publication Date: 8/21/2010