MidnightBSD

Advisories for rhythm

CVE-2011-2903 MEDIUM

Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. NOTE: this is only a vulnerability in limited scenarios in which tcptrack is "configured as a handler for other applications." This issue might not qualify for inclusion in CVE.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-119,

Products Affected

Vendor Product Version
rhythm tcptrack 1.1
rhythm tcptrack 1.1.2
rhythm tcptrack 1.2.0
rhythm tcptrack 1.0.1
rhythm tcptrack 1.1.1
rhythm tcptrack 1.1.3
rhythm tcptrack *
rhythm tcptrack 1.1.5
rhythm tcptrack 1.0.2
rhythm tcptrack 1.3.0
rhythm tcptrack 1.1.4
rhythm tcptrack 1.4.0
rhythm tcptrack 1.0.0
rhythm tcptrack 1.1.0