← Back

CVE-2004-1701

nvd nist
Published: Aug 9, 2004Modified: Apr 16, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication.

Affected (20)

Products: Gnu: Cfengine
Gnu
1 product
Cfengine
Configuration A
20 vulnerable
Vulnerable SoftwareAffected Versions
Gnu
Cfengine
Version 2.0.0
Cfengine
Version 2.0.1
Cfengine
Version 2.0.2
Cfengine
Version 2.0.3
Cfengine
Version 2.0.4
Cfengine
Version 2.0.5
Cfengine
Version 2.0.5 b1
Cfengine
Version 2.0.5 pre2
Cfengine
Version 2.0.5 pre
Cfengine
Version 2.0.6
Cfengine
Version 2.0.7
Cfengine
Version 2.0.7 p1
Cfengine
Version 2.0.7 p2
Cfengine
Version 2.0.7 p3
Cfengine
Version 2.0.8
Cfengine
Version 2.0.8 p1
Cfengine
Version 2.1.0 a6
Cfengine
Version 2.1.0 a8
Cfengine
Version 2.1.0 a9
Cfengine
Version 2.1.7 p1

References (14)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.