CVE-2011-4093

Upstream information

CVE-2011-4093 at MITRE

Description

Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	5.8
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:N
Access Vector	Network
Access Complexity	Medium
Authentication	None
Confidentiality Impact	Partial
Integrity Impact	Partial
Availability Impact	None

SUSE Bugzilla entry: 727710 [RESOLVED / FIXED]

SUSE Security Advisories:

• openSUSE-SU-2012:0008-1, published Thu, 5 Jan 2012 12:08:20 +0100 (CET)
• openSUSE-SU-2012:0040-1, published Thu, 5 Jan 2012 12:35:46 +0100 (CET)

List of released packages

Product(s)	Fixed package version(s)	References
openSUSE 11.3	net6-debuginfo >= 1.3.14-0.3.1 net6-debugsource >= 1.3.14-0.3.1
openSUSE 11.3 openSUSE 11.4	net6 >= 1.3.14-0.3.1 net6-devel >= 1.3.14-0.3.1 net6-lang >= 1.3.14-0.3.1
openSUSE 11.4	net6 >= 1.3.14-0.3.1 net6-debuginfo >= 1.3.14-0.3.1 net6-debugsource >= 1.3.14-0.3.1 net6-devel >= 1.3.14-0.3.1 net6-lang >= 1.3.14-0.3.1	Patchnames: net6
openSUSE Tumbleweed	net6 >= 1.3.14-12.8 net6-devel >= 1.3.14-12.8 net6-lang >= 1.3.14-12.8	Patchnames: openSUSE Tumbleweed GA net6