CVE Vulnerabilities

CVE-2004-1702

Published: Aug 09, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction function, which leads to a failed malloc call and triggers to a null dereference, which allows remote attackers to cause a denial of service (crash).

Affected Software

Name Vendor Start Version End Version
Cfengine Gnu 2.0.0 2.0.0
Cfengine Gnu 2.0.1 2.0.1
Cfengine Gnu 2.0.2 2.0.2
Cfengine Gnu 2.0.3 2.0.3
Cfengine Gnu 2.0.4 2.0.4
Cfengine Gnu 2.0.5 2.0.5
Cfengine Gnu 2.0.5 2.0.5
Cfengine Gnu 2.0.5 2.0.5
Cfengine Gnu 2.0.5 2.0.5
Cfengine Gnu 2.0.6 2.0.6
Cfengine Gnu 2.0.7 2.0.7
Cfengine Gnu 2.0.7 2.0.7
Cfengine Gnu 2.0.7 2.0.7
Cfengine Gnu 2.0.7 2.0.7
Cfengine Gnu 2.0.8 2.0.8
Cfengine Gnu 2.0.8 2.0.8
Cfengine Gnu 2.1.0 2.1.0
Cfengine Gnu 2.1.0 2.1.0
Cfengine Gnu 2.1.0 2.1.0
Cfengine Gnu 2.1.7 2.1.7

References