full-disclosure - ADVISORY * =Thu Mar 16 21:10:46 EST 2006= * Integer Overflow in Tripwire

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060317021052.3A246A9F8@lists.grok.org.uk>
Date: Fri Mar 17 02:34:45 2006
From: fabien.kraemer at gmail.com (Fabien Kraemer)
Subject: ADVISORY * =Thu Mar 16 21:10:46 EST 2006= *
	Integer Overflow in Tripwire

ADVISORY * =Thu Mar 16 21:10:46 EST 2006= * Integer Overflow in Tripwire

8===D Description
Tripwire incorrectly parses integer data, and this can be used to execute arbitrary code.

8===D History
16/3/2006 8==D Public Disclosure.
8===D Vendor Response
Tripwire had extended no information.
8===D CVE Information
The Common Vulnerabilities and Exposures (CVE) project has assigned the name CVE-2006-591681 to this issue

Appendix A Vendor Information
http://www.tripwire.com/

Appendix B References
RFC 5767

Contact
Fabien Kraemer lolville@...m.la
1-888-565-9428

CEH CSFA SSP-CNSA GIPS GHTQ CAP SSCP