medium6.5
CVE-2012-6123
Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."
Impact
Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Call-Cc | Chicken | before 4.8.0 |
| Debian | Debian Linux | Versions 8.0, 9.0, 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2013/02/08/2
- https://access.redhat.com/security/cve/cve-2012-6123
- https://security-tracker.debian.org/tracker/CVE-2012-6123
- http://www.openwall.com/lists/oss-security/2013/02/08/2
- https://access.redhat.com/security/cve/cve-2012-6123
- https://security-tracker.debian.org/tracker/CVE-2012-6123