NASLDB: FreeBSD : nut -- upsd can be remotely crashed (47f13540-c4cb-4971-8dc6-28d0dabfd9cd)
General
ID: 59313
Name: FreeBSD : nut — upsd can be remotely crashed (47f13540-c4cb-4971-8dc6-28d0dabfd9cd)
Summary: Checks for updated package in pkg_info output
Credits: Tenable Network Security, Inc.
Classification
Risk: –
CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: –
Port: 0
Family: FreeBSD Local Security Checks
Type: Local
Description
Networkupstools project reports :
NUT server (upsd), from versions 2.4.0 to 2.6.3, are exposed to
crashes when receiving random data from the network.
This issue is related to the way NUT parses characters, especially
from the network. Non printable characters were missed from strings
operation (such as strlen), but still copied to the buffer, causing an
overflow.
Exploiting
Exploit Available: –
Exploitability Ease: –
Sources
CVE: CVE-2012-2944
OSVDB: –
Bugtraq: –
scipID: –
Timeline
Vulnerability Disclosure: 2012/05/30
Patch Release: 2012/05/30
Plugin Release: 2012/05/31
Plugin
Version: 1.4
Filename: freebsd_pkg_47f13540c4cb49718dc628d0dabfd9cd.nasl
Filesize: 4579 bytes
MD5 Hash: 17bb9803f3ef124fca7344e19f140b47
Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info
Dependencies: "ssh_get_info.nasl"
Copyright: This script is© 2012 Tenable Network Security, Inc.
- Letzte Plugins
- USN-1611-1 : thunderbird vulnerabilities
- USN-1610-1 : linux vulnerability
- USN-1609-1 : linux-ti-omap4 vulnerability
- SuSE 10 Security Update : PostgreSQL
- RHSA-2012-1364: bind97
- RHSA-2012-1363: bind
- RHSA-2012-1362: thunderbird
- RHSA-2012-1361: xulrunner
- Mandriva Linux Security Advisory : graphicsmagick
- FreeBSD : phpMyAdmin — Multiple XSS due to unescaped HTML output in Trigger, Procedure and Event pages and Fetching the version information from a non-SSL site is vulnerable to a MITM attack