TI-2012-03776 CVE-2012-4434 · GHSA-hh46-vfhf-rqg7
Incorrect default permissions in fwknop
Priority MEDIUM 44
fwknop before 2.0.3 allow remote authenticated users to cause a denial of service (server crash) or possibly execute arbitrary code.
No Cipherdyne vulnerabilities are listed in CISA KEV.
3 records in Fwknop · all components
fwknop before 2.0.3 allow remote authenticated users to cause a denial of service (server crash) or possibly execute arbitrary code.
fwknop before 2.0.3 does not properly validate IP addresses, which allows remote authenticated users to cause a denial of service (server crash) via a long IP address.
Buffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service (client crash) and possibly execute arbitrary code via…