Unscored CVE-2010-1100 EUVD-2010-1132GHSA-j86h-2jgv-f6x9

Integer overflow in Arora allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outsid…

Published Mar 24, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

Integer overflow in Arora allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25.

References

20100323 Safari browser port blocking bypassed by integer overflow mailing-list
arora-tcp-security-bypass(57234) vdb-entry