CVE Vulnerabilities

CVE-2003-0625

Published: Aug 27, 2003 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the servers response.

Affected Software

Name Vendor Start Version End Version
Xfstt Xfstt 1.2.1 1.2.1
Xfstt Xfstt 1.4 1.4
Xfstt Ubuntu dapper *
Xfstt Ubuntu devel *
Xfstt Ubuntu edgy *
Xfstt Ubuntu feisty *

References