Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14...
Vulnerability Description
Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-4093
Credits & Attribution
No credits recorded in the NVD database.
References
- https://bugzilla.novell.com/show_bug.cgi?id=727710
- http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=ac61d7fb42a1f977fb527e024bede319c4a9e169%3Bhp=08c8e2261604c6fcbbaf62f9ae9d13f7015fcb9a
- https://bugzilla.redhat.com/show_bug.cgi?id=750631
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html
- http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html
- http://www.openwall.com/lists/oss-security/2011/10/31/1
More from oracle
View All →Affected Vendor
oracle
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.