Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

openswan: stack based buffer overflow

Package(s):

openswan

CVE #(s):

CAN-2005-0162

Created:

January 28, 2005

Updated:

February 1, 2005

Description:

A stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code.

Alerts:

Fedora

FEDORA-2005-082

2005-01-28

(Log in to post comments)