CVE-2012-3368
dtach: Memory portion (random stack data) disclosure to the client by unclean client disconnect
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
CVSS 2.0 · 2.6 Low
EPSS 2.1%
KEV · Not listed
Vendors
Products