Skip to content

CVE-2014-5439 Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file that will bypass Non-eXecutable bit NX, stack smashing protector SSP, and address...

HighCVSS 7.8 EPSS 2.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file that will bypass Non-eXecutable bit NX, stack smashing protector SSP, and address space layout randomization ASLR protection mechanisms, which could let a malicious user execute arbitrary code.

Affected products

ProductAffected versionsFixed in
debian/sniffit(Debian:12) < 0.3.7.beta-20 0.3.7.beta-20
debian/sniffit(Debian:14) < 0.3.7.beta-20 0.3.7.beta-20
debian/sniffit(Debian:14) = 0.3.5-3 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-10 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-11 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-12 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-13 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-14 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-15 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-15.1 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-16 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-16.1 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-17 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-18 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-19 No fix listed
debian/sniffit(Debian:14) = 0.3.7.beta-6.1 No fix listed
sniffit project sniffit <= 0.3.7 No fix listed
debian linux = 8.0 No fix listed
debian linux = 9.0 No fix listed
debian linux = 10.0 No fix listed

References