CVE-2012-3368
First published: Wed Jun 27 2012(Updated: )
A portion of memory (random stack data) disclosure flaw was found in the way dtach, a simple program emulating the detach feature of screen, performed client connection termination under certain circumstances. A remote attacker could use this flaw to potentially obtain sensitive information by issuing a specially-crafted dtach client connection close request. Upstream ticket: [1] <a href="http://sourceforge.net/tracker/?func=detail&aid=3517812&group_id=36489&atid=417357">http://sourceforge.net/tracker/?func=detail&aid=3517812&group_id=36489&atid=417357</a> Preliminary proposed patch: [2] <a href="http://sourceforge.net/tracker/download.php?group_id=36489&atid=417357&file_id=441195&aid=3517812">http://sourceforge.net/tracker/download.php?group_id=36489&atid=417357&file_id=441195&aid=3517812</a> References: [3] <a href="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=625302">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=625302</a> [4] <a class="bz_bug_link bz_status_CLOSED bz_closed bz_public " title="CLOSED DUPLICATE - [PATCH] Bad behavior on disconnect" href="show_bug.cgi?id=812551">https://bugzilla.redhat.com/show_bug.cgi?id=812551</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Dtach | =0.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://sourceforge.net/tracker/?func=detail&aid=3517812&group_id=36489&atid=417357
- http://sourceforge.net/tracker/download.php?group_id=36489&atid=417357&file_id=441195&aid=3517812
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=625302
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=812551
- http://www.openwall.com/lists/oss-security/2012/06/27/3
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=594740&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=594740&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=835853
- https://access.redhat.com/security/cve/CVE-2012-3368
- http://www.openwall.com/lists/oss-security/2012/06/29/1
- https://access.redhat.com/security/cve/cve-2012-3368
- https://bugzilla.redhat.com/show_bug.cgi?id=835849
- https://bugzilla.redhat.com/show_bug.cgi?id=812551
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- collector/redhat-bugzilla
- alias/CVE-2012-3368
- vendor/redhat
- canonical/redhat dtach
- version/redhat dtach/0.8