« Volver al listado

CVE-2011-2903

Estado: ModificadaMedia (6.8)—

Desbordamiento de bufer basado en memoria dinámica en tcptrack antes de v1.4.2 podría permitir a atacantes ejecutar codigo de su elección a través de un argumento de linea de comando largo. NOTA: esta es solamente un vulnerabilidad en escenarios limitados en los que tcptrack está "configurado como manejador para otras aplicaciones". Este fallo puede on estar cualificado para inclusión en CVE.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Rhythm — Tcptrack

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-2903",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-09-02T16:55:05.677",
  "references": [
    {
      "url": "http://seclists.org/oss-sec/2011/q3/293",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/08/31/1",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.rhythm.cx/~steve/devel/tcptrack/",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/49352",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=377917",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=729096",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69467",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://seclists.org/oss-sec/2011/q3/293",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/08/31/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.rhythm.cx/~steve/devel/tcptrack/",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/49352",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=377917",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=729096",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69467",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. NOTE: this is only a vulnerability in limited scenarios in which tcptrack is \"configured as a handler for other applications.\" This issue might not qualify for inclusion in CVE."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de bufer basado en memoria dinámica en tcptrack antes de v1.4.2 podría permitir a atacantes ejecutar codigo de su elección a través de un argumento de linea de comando largo. NOTA: esta es solamente un vulnerabilidad en escenarios limitados en los que tcptrack está \"configurado como manejador para otras aplicaciones\". Este fallo puede on estar cualificado para inclusión en CVE."
    }
  ],
  "lastModified": "2026-06-16T23:32:13.190",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE8F756F-F479-47F9-B9CD-32C84DECB62D",
              "versionEndIncluding": "1.4.1"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0505E0D4-EE25-40CC-8498-B750F6EA1706"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4ACCB71-8703-42B8-B2A4-254638342B78"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "868D560B-411D-4D92-8972-2820DFE26017"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34162318-DCDC-49CA-932C-39EF6BFA8797"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.1:beta1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6A122080-F32A-4913-B59B-2137C62A5DD3"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD68EA3E-BB47-4CF2-BC1D-2E87066DAFBD"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C0C1E91-CE04-4CBF-9BA6-B6F844B2D881"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "85BE6467-BDD4-41B0-8BE3-3EF8DC482B10"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "341F8D6F-7A5B-4906-9F93-D9096CBEBDAD"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3E3C0AF-2CF2-4E86-AAAE-817D5F9FBAE7"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E40367CA-1996-494F-935B-2956B97B2036"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9EC7E8B2-835F-481B-AD71-FB7F1D94F80E"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D247729A-CC40-488C-963A-B7C545C1AFAC"
            },
            {
              "criteria": "cpe:2.3:a:rhythm:tcptrack:1.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "86D43D1A-EAA2-4B84-9A0A-5151C07D5B4C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}