11 results · Feed
-
Medium 6.8
Pppd: pppd: buffer overflow in peap response handling leads to data corruption or denial of service.
A flaw was found in pppd. A remote attacker could exploit a buffer overflow vulnerability in the PEAP response handling. By sending a specially crafted PEAP Request packet, an attacker could cause the pppd process to corrupt global static data, leading to inc…
-
Critical 9.3
The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.
-
Medium 4.3
ppp pppdump pppdump.c dumpppp array index
A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real …
-
Critical 9.8
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
-
Critical 9.8
Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a …
-
Unscored —
Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when t…
-
Unscored —
Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers…
-
Unscored —
ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on …
-
Unscored —
The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink a…
-
Unscored —
The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, whic…
-
Unscored —
Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) v…