LWN.net Logo

openswan: stack based buffer overflow

Package(s):openswan CVE #(s):CAN-2005-0162
Created:January 28, 2005 Updated:February 1, 2005
Description: A stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code.
Alerts:
Fedora FEDORA-2005-082 2005-01-28

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds