6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers to cause a denial of service (resource exhaustion) by repeatedly connecting to and disconnecting from the server.
References
| Link | Resource |
|---|---|
| ftp://213.146.38.146/pub/wojtekka/6tunnel-0.09.tar.gz | Broken Link |
| http://marc.info/?l=bugtraq&m=100386451702966&w=2 | Exploit Mailing List |
| http://www.securityfocus.com/bid/3467 | Broken Link Third Party Advisory VDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/7337 | Third Party Advisory VDB Entry |
Configurations
History
09 Feb 2024, 02:52
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
| CPE | cpe:2.3:a:6tunnel_project:6tunnel:*:*:*:*:*:*:*:* | |
| References | (CONFIRM) ftp://213.146.38.146/pub/wojtekka/6tunnel-0.09.tar.gz - Broken Link | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/7337 - Third Party Advisory, VDB Entry | |
| References | (BID) http://www.securityfocus.com/bid/3467 - Broken Link, Third Party Advisory, VDB Entry | |
| References | (BUGTRAQ) http://marc.info/?l=bugtraq&m=100386451702966&w=2 - Exploit, Mailing List | |
| CWE | CWE-772 | |
| First Time |
6tunnel Project 6tunnel
6tunnel Project |
Information
Published : 2001-12-06 05:00
Updated : 2024-02-28 10:24
NVD link : CVE-2001-0830
Mitre link : CVE-2001-0830
CVE.ORG link : CVE-2001-0830
JSON object : View
Products Affected
6tunnel_project
- 6tunnel
CWE
CWE-772
Missing Release of Resource after Effective Lifetime