CVE-2012-3368 Integer overflow in n/a
Remote attackers can read sensitive daemon stack memory via an integer signedness error in dtach, potentially exposing application data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-3368?
CVE-2012-3368 is a low-severity vulnerability in n/a, published on 3 Jul 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
Weakness: CWE-189
Which versions are affected by CVE-2012-3368?
It affects 1 product.
Products include Redhat Dtach.
How do I fix CVE-2012-3368?
Upgrade to a fixed version.
Is CVE-2012-3368 being exploited?
There is no known exploitation of CVE-2012-3368 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2012-3368, GHSA-7m89-h8gh-232j.