ID CVE-2010-3071
Summary bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command.
References
Vulnerable Configurations
  • cpe:2.3:a:duckcorp:bip:0.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.8.0:rc0:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.8.0:rc0:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.8.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.8.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.8.3:*:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.8.4:*:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:duckcorp:bip:0.8.5:*:*:*:*:*:*:*
    cpe:2.3:a:duckcorp:bip:0.8.5:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 27-01-2012 - 17:43)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 42995
confirm
fedora FEDORA-2010-15774
mlist
  • [oss-security] 20100905 CVE Request -- Bip -- Remote Dos (crash) by exchanging user credentials
  • [oss-security] 20100907 Re: CVE Request -- Bip -- Remote Dos (crash) by exchanging user credentials
secunia 42889
vupen ADV-2011-0096
Last major update 27-01-2012 - 17:43
Published 14-10-2010 - 05:57
Last modified 27-01-2012 - 17:43
Back to Top