CVE-2006-6772

Sažetak

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.

Reference

http://sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439
http://www.securityfocus.com/bid/21735
http://securitytracker.com/id?1017440
http://secunia.com/advisories/23492
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051457.html
http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.044.html
http://www.ubuntu.com/usn/usn-399-1
http://secunia.com/advisories/23588
http://www.novell.com/linux/security/advisories/2007_05_w3m.html
http://secunia.com/advisories/23717
http://security.gentoo.org/glsa/glsa-200701-06.xml
http://secunia.com/advisories/23773
http://fedoranews.org/cms/node/2415
http://fedoranews.org/cms/node/2416
http://secunia.com/advisories/23792
http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?r1=1.249&r2=1.250
http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?view=log
http://www.securityfocus.com/bid/24332
http://www.vupen.com/english/advisories/2006/5164
https://exchange.xforce.ibmcloud.com/vulnerabilities/34821
https://exchange.xforce.ibmcloud.com/vulnerabilities/31114
http://w3m.cvs.sourceforge.net/%2Acheckout%2A/w3m/w3m/NEWS?revision=1.79

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

07-11-2023 - 01:59

Objavljeno

27-12-2006 - 23:28