Secunia
Login
|
|
CVE Reference: CVE-2003-0795 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2003-0795 |
|
|
Description: The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference. |
|
|
CVE Status: Candidate |
|
|
References: SAID Secunia Advisory: SA10563 REDHAT http://www.redhat.com/support/errata/RHSA-2003-307.html http://www.redhat.com/support/errata/RHSA-2003-305.html DEBIAN http://www.debian.org/security/2004/dsa-415 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=106883387304266&w=2 |
|
| Return to the previous page. |
