Vulnerabilities > CVE-2004-0408 - Remote Buffer Overflow vulnerability in Michael Bacarella IDent2 Daemon Child_Service
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |
Nessus
NASL family FreeBSD Local Security Checks NASL id FREEBSD_PKG_992302778FB411D88B290020ED76EF5A.NASL description Jack of RaptureSecurity reported a double byte buffer overflow in ident2. The bug may allow a remote attacker to execute arbitrary code within the context of the ident2 daemon. The daemon typically runs as user-ID `nobody last seen 2020-06-01 modified 2020-06-02 plugin id 36517 published 2009-04-23 reporter This script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/36517 title FreeBSD : ident2 double byte buffer overflow (99230277-8fb4-11d8-8b29-0020ed76ef5a) NASL family FreeBSD Local Security Checks NASL id FREEBSD_IDENT2_104.NASL description The following package needs to be updated: ident2 last seen 2016-09-26 modified 2004-07-06 plugin id 12553 published 2004-07-06 reporter Tenable source https://www.tenable.com/plugins/index.php?view=single&id=12553 title FreeBSD : ident2 double byte buffer overflow (72) NASL family Debian Local Security Checks NASL id DEBIAN_DSA-494.NASL description Jack <> discovered a buffer overflow in ident2, an implementation of the ident protocol (RFC1413), where a buffer in the child_service function was slightly too small to hold all of the data which could be written into it. This vulnerability could be exploited by a remote attacker to execute arbitrary code with the privileges of the ident2 daemon (by default, the last seen 2020-06-01 modified 2020-06-02 plugin id 15331 published 2004-09-29 reporter This script is Copyright (C) 2004-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/15331 title Debian DSA-494-1 : ident2 - buffer overflow