medium5.0
CVE-2015-0885
checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.
Impact
checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Debian Linux | Version 7.0 |
| Checkpw Project | Checkpw | through 1.02 |
Weakness classification
References
- NVD record
- CVE.org record
- http://checkpw.sourceforge.net/checkpw/changes.txt
- http://jvn.jp/en/jp/JVN34790526/995575/index.html
- http://jvn.jp/en/jp/JVN34790526/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000032
- http://www.debian.org/security/2015/dsa-3192
- http://checkpw.sourceforge.net/checkpw/changes.txt
- http://jvn.jp/en/jp/JVN34790526/995575/index.html
- http://jvn.jp/en/jp/JVN34790526/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000032
- http://www.debian.org/security/2015/dsa-3192