Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

hashcash: format string vulnerability

Package(s):

hashcash

CVE #(s):

Created:

March 7, 2005

Updated:

March 9, 2005

Description:

Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw in the Hashcash utility that an attacker could expose by specifying a malformed reply address. Successful exploitation would permit an attacker to disrupt Hashcash users, and potentially execute arbitrary code.

Alerts:

Gentoo

200503-12

2005-03-06

(Log in to post comments)