CVE-2005-4808

Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file.

CVSS v2.0 7.6 HIGH

7.6^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability : 4.9 / Impact : 10.0

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://sources.redhat.com/bugzilla/show_bug.cgi?id=1069	Issue Tracking Patch Third Party Advisory
http://www.ubuntu.com/usn/usn-366-1	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44661	Third Party Advisory VDB Entry
http://sources.redhat.com/bugzilla/show_bug.cgi?id=1069	Issue Tracking Patch Third Party Advisory
http://www.ubuntu.com/usn/usn-366-1	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44661	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*

History

21 Nov 2024, 00:05

Type	Values Removed	Values Added
References	~~() http://sources.redhat.com/bugzilla/show_bug.cgi?id=1069 - Issue Tracking, Patch, Third Party Advisory~~	() http://sources.redhat.com/bugzilla/show_bug.cgi?id=1069 - Issue Tracking, Patch, Third Party Advisory
References	~~() http://www.ubuntu.com/usn/usn-366-1 - Third Party Advisory~~	() http://www.ubuntu.com/usn/usn-366-1 - Third Party Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/44661 - Third Party Advisory, VDB Entry~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/44661 - Third Party Advisory, VDB Entry

Information

Published : 2005-12-31 05:00

Updated : 2024-11-21 00:05

NVD link : CVE-2005-4808

Mitre link : CVE-2005-4808

CVE.ORG link : CVE-2005-4808

JSON object : View

Products Affected

gnu

binutils

canonical

ubuntu_linux

CWE

NVD-CWE-Other

{"id": "CVE-2005-4808", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "HIGH", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2005-12-31T05:00:00.000", "references": [{"url": "http://sources.redhat.com/bugzilla/show_bug.cgi?id=1069", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.ubuntu.com/usn/usn-366-1", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44661", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://sources.redhat.com/bugzilla/show_bug.cgi?id=1069", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ubuntu.com/usn/usn-366-1", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44661", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file."}], "lastModified": "2024-11-21T00:05:13.983", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "133521B0-6212-48E3-B114-216F626E1D23", "versionEndExcluding": "2.17"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FA3A32E-445A-4D39-A8D5-75F5370AD23D"}], "operator": "OR"}]}], "vendorComments": [{"comment": "gas (and gcc) make no promise that they are fault tolerant to bad input. We do not plan on producing security updates for Red Hat Enterprise Linux to correct these bugs.", "lastModified": "2006-08-24T00:00:00", "organization": "Red Hat"}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "This vulnerability is addressed in the following patch:\nGNU, Binutils, patch 20050714"}