Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 16 Jan 2025 08:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 15 Jan 2025 05:30:00 +0000

Type Values Removed Values Added
Description Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.
Weaknesses CWE-121
References
Metrics cvssV3_0

{'score': 7, 'vector': 'CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published:

Updated: 2025-01-15T15:05:11.168Z

Reserved: 2024-12-09T02:20:11.867Z

Link: CVE-2024-55577

cve-icon Vulnrichment

Updated: 2025-01-15T15:05:07.432Z

cve-icon NVD

Status : Received

Published: 2025-01-15T06:15:16.740

Modified: 2025-01-15T06:15:16.740

Link: CVE-2024-55577

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.