Upstream information
Description
Stack-based buffer overflow in the eap_do_notify function in eap.c in xsupplicant before 1.2.6, and possibly other versions, allows remote authenticated users to execute arbitrary code via unspecified vectors.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having critical severity.
| National Vulnerability Database | |
|---|---|
| Base Score | 9 |
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
| Access Vector | Network |
| Access Complexity | Low |
| Authentication | Single |
| Confidentiality Impact | Complete |
| Integrity Impact | Complete |
| Availability Impact | Complete |
SUSE Security Advisories:
- SUSE-SR:2007:001, published Fri, 19 Jan 2007 17:00:00 +0000
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 05:15:45 2013CVE page last modified: Fri Dec 8 16:18:16 2023