| Vulnerability Name: | CVE-2005-2627 (CCN-21850) | ||||||||||||
| Assigned: | 2005-08-16 | ||||||||||||
| Published: | 2005-08-16 | ||||||||||||
| Updated: | 2011-03-08 | ||||||||||||
| Summary: | Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via (1) kernel headers in a pcap file or (2) data frame dissection, which leads to heap-based buffer overflows. | ||||||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||||||
| Vulnerability Type: | CWE-Other | ||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2005-2627 Source: MITRE Type: CNA CVE-2005-2657 Source: CCN Type: SA16447 Kismet Multiple Vulnerabilities Source: SECUNIA Type: Vendor Advisory 16447 Source: SECUNIA Type: UNKNOWN 16477 Source: SECUNIA Type: UNKNOWN 16634 Source: CCN Type: SA16822 common-lisp-controller Cache Directory Privilege Escalation Source: DEBIAN Type: UNKNOWN DSA-788 Source: DEBIAN Type: DSA-788 kismet -- several vulnerabilities Source: DEBIAN Type: DSA-811 common-lisp-controller -- design error Source: CCN Type: GLSA-200508-10 Kismet: Multiple vulnerabilities Source: GENTOO Type: UNKNOWN GLSA-200508-10 Source: CCN Type: Kismet Web site Kismet Source: CONFIRM Type: UNKNOWN http://www.kismetwireless.net/blog/?entry=/kismet/entry-1124158146.txt Source: CCN Type: Kismet Change log Kismet Source: CONFIRM Type: UNKNOWN http://www.kismetwireless.net/CHANGELOG Source: SUSE Type: UNKNOWN SUSE-SR:2005:020 Source: CCN Type: OSVDB ID: 18768 Kismet pcap File Processing Underflow DoS Source: CCN Type: OSVDB ID: 18769 Kismet CDP Protocol Processor Remote Overflow Source: BID Type: UNKNOWN 14430 Source: CCN Type: BID-14430 Kismet Multiple Remote Vulnerabilities Source: CCN Type: BID-14433 Business Objects Enterprise/Crystal Reports Server Unspecified Denial Of Service Vulnerability Source: CCN Type: BID-14829 Common-Lisp-Controller Cache Arbitrary Code Injection Vulnerability Source: VUPEN Type: UNKNOWN ADV-2005-1422 Source: XF Type: UNKNOWN kismet-pcap-heap-corruption(21850) Source: SUSE Type: SUSE-SR:2005:020 SUSE Security Summary Report | ||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||
| Oval Definitions | |||||||||||||
| |||||||||||||
| BACK | |||||||||||||