CVE-2012-0802
Estado: ModificadaAlta (7.5)—
Multiple buffer overflows in Spamdyke before 4.3.0 might allow remote attackers to execute arbitrary code via vectors related to "serious errors in the usage of snprintf()/vsnprintf()" in which the return values may be larger than the size of the buffer.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 4.57%
- Percentil entre todas las CVEs puntuadas: 91
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-119
Referencias
- http://secunia.com/advisories/47548
- http://secunia.com/advisories/48257
- http://security.gentoo.org/glsa/glsa-201203-01.xml
- http://www.mail-archive.com/spamdyke-release%40spamdyke.org/msg00014.html
- http://www.openwall.com/lists/oss-security/2012/01/23/5
- http://www.osvdb.org/78351
- http://www.securityfocus.com/bid/51440
- http://www.spamdyke.org/documentation/Changelog.txt
- http://secunia.com/advisories/47548
- http://secunia.com/advisories/48257
- http://security.gentoo.org/glsa/glsa-201203-01.xml
- http://www.mail-archive.com/spamdyke-release%40spamdyke.org/msg00014.html
- http://www.openwall.com/lists/oss-security/2012/01/23/5
- http://www.osvdb.org/78351
- http://www.securityfocus.com/bid/51440
- http://www.spamdyke.org/documentation/Changelog.txt
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-0802",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-06-19T20:55:05.113",
"references": [
{
"url": "http://secunia.com/advisories/47548",
"tags": [
"Vendor Advisory"
],
"source": "secalert@redhat.com"
},
{
"url": "http://secunia.com/advisories/48257",
"tags": [
"Vendor Advisory"
],
"source": "secalert@redhat.com"
},
{
"url": "http://security.gentoo.org/glsa/glsa-201203-01.xml",
"source": "secalert@redhat.com"
},
{
"url": "http://www.mail-archive.com/spamdyke-release%40spamdyke.org/msg00014.html",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/01/23/5",
"source": "secalert@redhat.com"
},
{
"url": "http://www.osvdb.org/78351",
"source": "secalert@redhat.com"
},
{
"url": "http://www.securityfocus.com/bid/51440",
"source": "secalert@redhat.com"
},
{
"url": "http://www.spamdyke.org/documentation/Changelog.txt",
"source": "secalert@redhat.com"
},
{
"url": "http://secunia.com/advisories/47548",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/48257",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://security.gentoo.org/glsa/glsa-201203-01.xml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mail-archive.com/spamdyke-release%40spamdyke.org/msg00014.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/01/23/5",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/78351",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/51440",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.spamdyke.org/documentation/Changelog.txt",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple buffer overflows in Spamdyke before 4.3.0 might allow remote attackers to execute arbitrary code via vectors related to \"serious errors in the usage of snprintf()/vsnprintf()\" in which the return values may be larger than the size of the buffer."
},
{
"lang": "es",
"value": "Múltiples desbordamientos de búfer en Spamdyke antes v4.3.0 podría permitir a atacantes remotos ejecutar código arbitrario a través de vectores relacionados con \"graves errores en el uso de snprintf()/vsnprintf()\" donde los valores de retorno pueden ser más grande que el tamaño del búfer ."
}
],
"lastModified": "2026-06-16T23:38:17.270",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "770EBC98-148B-4CEB-99FC-0FF18E725C6D",
"versionEndIncluding": "4.2.1"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:3.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07A0ACF5-C979-47F9-9BEB-D6C45604F536"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1BAFC19-C601-46EF-8830-9B0990C0F5B3"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:3.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F28F91C-A3FB-4130-B256-550FB8A9565F"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:3.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E64D359-91C8-43AD-A20E-0789AE496CB8"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:3.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9633F036-B7C1-4108-AAAB-841A67E59346"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:3.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1127C109-252C-41F1-B6E3-F88D7AA1D95B"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:3.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3683DA2F-E22A-427E-A5E1-1FDC8676FFF7"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:3.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02D659E2-36DD-4B20-A471-AC46BE39148A"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:3.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50C05EBB-5061-49CC-B68C-ADC05A7DEF63"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:3.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D93F2E1-ACAB-4AF5-BA35-43E88B2EB7B0"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:3.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5745B805-3635-4C55-A4DD-420C2368B787"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE97EFC7-0EEC-4E5D-8591-B1BFE144E148"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD3091F2-685F-4A8C-9DD0-DF59A76D8E65"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8A1B8B5-00DD-43CC-A794-D7E0F1C9FB07"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D71100B-2B40-4DE7-8EB3-E8DF26A98EC8"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95890A97-2866-40FE-825F-4B33EEB79CBB"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61209A23-0D6B-439C-8A05-D7BD99575438"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0BE90AE-2AF5-4EE9-A8C5-33B8D6A8C9FC"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE8B0A14-B443-4681-A45B-9B3EB1090D95"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8F5D3FF-F194-4E19-935B-80DEA718E7DF"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "778DA1ED-CAFC-4FDC-84D1-51F1FB602129"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.5:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D5B55DA-0FB9-4A14-9AE9-5D2B6DBC6E60"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.5:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59EA0DA4-74B4-4876-A87B-0AE38D9EF205"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.5:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84210085-4323-4EE6-B34B-A0419238CE9F"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.5:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFC6B738-F340-48B2-A084-E5C19DFAFD6B"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5C324A7-FF32-4C7E-B195-6D3EA9B3C811"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E130795B-BBFB-4512-A460-7694A4F889AA"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13AC9B55-7976-4744-86B8-E680B53D1DAA"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C7AB1A8-6550-4AD8-9B80-DFD26CC44784"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3143C744-0EB2-4B55-B7C8-697E570FD335"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01B03F63-BCAF-4035-A1DF-61DB5B75C4BE"
},
{
"criteria": "cpe:2.3:a:spamdyke:spamdyke:4.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16DCB642-CE54-4D57-8796-B4B3492EC9E6"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert@redhat.com"
}