FreeBSD : corkscrew -- buffer overflow vulnerability (67a1c3ae-ad69-11df-9be6-0015587e2cc1)

High Nessus Plugin ID 48397


The remote FreeBSD host is missing a security-related update.


The affected corkscrew versions use sscanf calls without proper bounds checking. In the authentication file parsing routine this can cause an exploitable buffer overflow condition. A similar but issue exists in the server response code but appears to be non-exploitable.


Update the affected package.

See Also

Plugin Details

Severity: High

ID: 48397

File Name: freebsd_pkg_67a1c3aead6911df9be60015587e2cc1.nasl

Version: $Revision: 1.5 $

Type: local

Published: 2010/08/23

Modified: 2013/06/21

Dependencies: 12634

Risk Information

Risk Factor: High

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:corkscrew, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2010/08/21

Vulnerability Publication Date: 2010/08/21