CVE-2012-3368 Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an i...
LowCVSS 2.6
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/dtach(Debian:12) | < 0.8-2.1 | 0.8-2.1 |
| debian/dtach(Debian:13) | < 0.8-2.1 | 0.8-2.1 |
| debian/dtach(Debian:14) | < 0.8-2.1 | 0.8-2.1 |
| redhat dtach | = 0.8 | No fix listed |
References
- Debian Security Tracker CVE-2012-3368 vendor-advisory
- bugs.debian.org
- sourceforge.net exploit
- sourceforge.net patch
- bugzilla.redhat.com exploit
- bugzilla.redhat.com
- bugs.debian.org issue-tracking