CVE-2011-1843 Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handli...
MediumCVSS 6.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| banu tinyproxy | <= 1.8.2 | No fix listed |
| banu tinyproxy | = 1.5.0 | No fix listed |
| banu tinyproxy | = 1.5.0-pre1 | No fix listed |
| banu tinyproxy | = 1.5.0-pre2 | No fix listed |
| banu tinyproxy | = 1.5.0-pre3 | No fix listed |
| banu tinyproxy | = 1.5.0-pre4 | No fix listed |
| banu tinyproxy | = 1.5.0-pre5 | No fix listed |
| banu tinyproxy | = 1.5.0-pre6 | No fix listed |
| banu tinyproxy | = 1.5.0-rc1 | No fix listed |
| banu tinyproxy | = 1.5.0-rc10 | No fix listed |
| banu tinyproxy | = 1.5.0-rc2 | No fix listed |
| banu tinyproxy | = 1.5.0-rc4 | No fix listed |
| banu tinyproxy | = 1.5.0-rc5 | No fix listed |
| banu tinyproxy | = 1.5.0-rc6 | No fix listed |
| banu tinyproxy | = 1.5.0-rc7 | No fix listed |
| banu tinyproxy | = 1.5.0-rc8 | No fix listed |
| banu tinyproxy | = 1.5.0-rc9 | No fix listed |
| banu tinyproxy | = 1.5.1 | No fix listed |
| banu tinyproxy | = 1.5.1-pre1 | No fix listed |
| banu tinyproxy | = 1.5.1-pre2 | No fix listed |
| banu tinyproxy | = 1.5.1-pre3 | No fix listed |
| banu tinyproxy | = 1.5.1-pre4 | No fix listed |
| banu tinyproxy | = 1.5.1-pre5 | No fix listed |
| banu tinyproxy | = 1.5.1-pre6 | No fix listed |
| banu tinyproxy | = 1.5.1-rc1 | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| banu tinyproxy | = 1.5.1-rc2 | No fix listed |
| banu tinyproxy | = 1.5.1-rc3 | No fix listed |
| banu tinyproxy | = 1.5.1-rc4 | No fix listed |
| banu tinyproxy | = 1.5.2 | No fix listed |
| banu tinyproxy | = 1.5.2-rc1 | No fix listed |
| banu tinyproxy | = 1.5.2-rc2 | No fix listed |
| banu tinyproxy | = 1.5.3 | No fix listed |
| banu tinyproxy | = 1.5.3-rc1 | No fix listed |
| banu tinyproxy | = 1.6.0 | No fix listed |
| banu tinyproxy | = 1.6.0-a | No fix listed |
| banu tinyproxy | = 1.6.0-pre1 | No fix listed |
| banu tinyproxy | = 1.6.0-pre2 | No fix listed |
| banu tinyproxy | = 1.6.0-pre3 | No fix listed |
| banu tinyproxy | = 1.6.0-pre4 | No fix listed |
| banu tinyproxy | = 1.6.0-rc1 | No fix listed |
| banu tinyproxy | = 1.6.0-rc2 | No fix listed |
| banu tinyproxy | = 1.6.0-rc3 | No fix listed |
| banu tinyproxy | = 1.6.1 | No fix listed |
| banu tinyproxy | = 1.6.2 | No fix listed |
| banu tinyproxy | = 1.6.3 | No fix listed |
| banu tinyproxy | = 1.6.4 | No fix listed |
| banu tinyproxy | = 1.6.5 | No fix listed |
| banu tinyproxy | = 1.7.0 | No fix listed |
| banu tinyproxy | = 1.7.1 | No fix listed |
| banu tinyproxy | = 1.8.0 | No fix listed |
| banu tinyproxy | = 1.8.1 | No fix listed |
| debian/tinyproxy(Debian:12) | < 1.8.2-2 | 1.8.2-2 |
| debian/tinyproxy(Debian:13) | < 1.8.2-2 | 1.8.2-2 |
| debian/tinyproxy(Debian:14) | < 1.8.2-2 | 1.8.2-2 |
References
- 47715 vdb-entry
- banu.com exploit patch
- banu.com patch
- Debian Security Tracker CVE-2011-1843 vendor-advisory
- bugs.debian.org issue-tracking