CVE-2004-0188 Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password.
HighCVSS 7.2
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| calife | = 2.8.4_c | No fix listed |
| calife | = 2.8.5 | No fix listed |
| debian/calife(Debian:12) | < 2.8.6-1 | 2.8.6-1 |
| debian/calife(Debian:13) | < 2.8.6-1 | 2.8.6-1 |
| debian/calife(Debian:14) | < 2.8.6-1 | 2.8.6-1 |
References
- 20040227 Calife heap corrupt / potential local root exploit mailing-list
- DSA-461 patch vendor-advisory
- 9756 patch vdb-entry vendor-advisory
- 9776 vdb-entry
- calife-long-password-bo(15335) vdb-entry
- Debian Security Tracker CVE-2004-0188 vendor-advisory
- bugs.debian.org issue-tracking