ID CVE-2005-0160
Summary Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command line argument, or (3) certain "Ready for next volume" messages.
References
Vulnerable Configurations
  • cpe:2.3:a:e-merge:unace:1.2b:*:*:*:*:*:*:*
    cpe:2.3:a:e-merge:unace:1.2b:*:*:*:*:*:*:*
CVSS
Base: 5.1 (as of 05-09-2008 - 20:45)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:H/Au:N/C:P/I:P/A:P
refmap via4
bid 12630
cert-vn VU#215006
fulldisc 20050222 unace-1.2b multiple buffer overflows and directory traversal bugs
secunia 14359
suse SUSE-SR:2005:016
Last major update 05-09-2008 - 20:45
Published 22-02-2005 - 05:00
Last modified 05-09-2008 - 20:45
Back to Top