CVE-2011-4093

Published: Feb 10, 2014Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.

Affected (16)

Products: Oracle: Solaris · Armin Burgmeier: Net6 · Opensuse: Opensuse · +1 more

Show all products

Oracle: Solaris · Armin Burgmeier: Net6 · Opensuse: Opensuse · Opensuse Project: Opensuse

1 product

Armin Burgmeier

1 product

1 product

Opensuse Project

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Solaris	Version 11.2

Configuration B

13 vulnerable

Vulnerable Software	Affected Versions
Armin Burgmeier Net6	Up to 1.3.13
Armin Burgmeier Net6	Version 1.3.10
Armin Burgmeier Net6	Version 1.3.11
Armin Burgmeier Net6	Version 1.3.12
Armin Burgmeier Net6	Version 1.3.1
Armin Burgmeier Net6	Version 1.3.2
Armin Burgmeier Net6	Version 1.3.3
Armin Burgmeier Net6	Version 1.3.4
Armin Burgmeier Net6	Version 1.3.5
Armin Burgmeier Net6	Version 1.3.6
Armin Burgmeier Net6	Version 1.3.7
Armin Burgmeier Net6	Version 1.3.8
Armin Burgmeier Net6	Version 1.3.9

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.3
Opensuse Project Opensuse	Version 11.4

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (14)

http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=ac61d7fb42a1f977fb527e024bede319c4a9e169%3Bhp=08c8e2261604c6fcbbaf62f9ae9d13f7015fcb9a

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2011/10/31/1

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.novell.com/show_bug.cgi?id=727710

Source: secalert@redhat.com

Issue TrackingThird Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=750631

Source: secalert@redhat.com

Issue TrackingThird Party AdvisoryVDB Entry

http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=ac61d7fb42a1f977fb527e024bede319c4a9e169%3Bhp=08c8e2261604c6fcbbaf62f9ae9d13f7015fcb9a

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.openwall.com/lists/oss-security/2011/10/31/1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.novell.com/show_bug.cgi?id=727710

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=750631

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party AdvisoryVDB Entry

Timeline

No history available yet.