ID CVE-2004-0188
Summary Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password.
References
Vulnerable Configurations
  • cpe:2.3:a:calife:calife:2.8.4_c:*:*:*:*:*:*:*
    cpe:2.3:a:calife:calife:2.8.4_c:*:*:*:*:*:*:*
  • cpe:2.3:a:calife:calife:2.8.5:*:*:*:*:*:*:*
    cpe:2.3:a:calife:calife:2.8.5:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 03-05-2018 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid
  • 9756
  • 9776
bugtraq
  • 20040227 Calife heap corrupt / potential local root exploit
  • 20040227 Re: Calife heap corrupt / potential local root exploit
debian DSA-461
xf calife-long-password-bo(15335)
Last major update 03-05-2018 - 01:29
Published 15-03-2004 - 05:00
Last modified 03-05-2018 - 01:29
Back to Top