Integer overflow in Armin Burgmeier Net6
CVE-2011-4093
Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.
Vulnerability class: Integer Overflow
EPSS: 0.018 (76.5th percentile) — read the EPSS interpretation.
Affected products
- Armin_burgmeier Net6 — versions 1.3.1, 1.3.2, 1.3.3
- Opensuse_project Opensuse — versions 11.4
- Oracle Solaris — versions 11.2
- Opensuse — versions 11.3
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_CONFIRM, VDB Entry, Third Party Advisory, Issue Tracking)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM, VDB Entry, Third Party Advisory, Issue Tracking)
- secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory)
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_SUSE)
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_SUSE)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Third Party Advisory)