First published: Tue Jan 22 2008(Updated: )
Stack-based buffer overflow in SocksCap 2.40-051231 and earlier, when "Resolve all names remotely" is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long hostname.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Nec Sockscap | <=2.40_051231 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-0378 has a high severity level due to its potential to cause denial of service and allow arbitrary code execution.
To fix CVE-2008-0378, upgrade to a version of SocksCap later than 2.40-051231 that does not include the vulnerability.
CVE-2008-0378 affects SocksCap version 2.40-051231 and earlier when the "Resolve all names remotely" option is enabled.
CVE-2008-0378 is a stack-based buffer overflow vulnerability.
Yes, CVE-2008-0378 can potentially allow remote attackers to execute arbitrary code.