CVE-2008-7232

EUVD-2008-7190
Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
Affected Products (NVD)
VendorProductVersion
netplex-techxtacacsd
𝑥
≤ 4.1.2
netplex-techxtacacsd
2.0
netplex-techxtacacsd
3.0
netplex-techxtacacsd
3.1
netplex-techxtacacsd
3.2
netplex-techxtacacsd
3.3
netplex-techxtacacsd
3.4
netplex-techxtacacsd
3.5
netplex-techxtacacsd
4.0
netplex-techxtacacsd
4.1
netplex-techxtacacsd
4.1.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://aluigi.altervista.org/adv/xtacacsdz-adv.txt
http://aluigi.org/poc/xtacacsdz.zip
https://exchange.xforce.ibmcloud.com/vulnerabilities/39551
http://aluigi.altervista.org/adv/xtacacsdz-adv.txt
http://aluigi.org/poc/xtacacsdz.zip
https://exchange.xforce.ibmcloud.com/vulnerabilities/39551