Search
Find a vulnerability
Search criteria
2 vulnerabilities found for iodine by kryo
CVE-2014-4168 (GCVE-0-2014-4168)
Vulnerability from nvd – Published: 2014-07-03 17:00 – Updated: 2024-08-06 11:04
VLAI
EPSS
VEX
Summary
(1) iodined.c and (2) user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/59417 | third-party-advisoryx_refsource_SECUNIA |
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug… | x_refsource_CONFIRM |
| http://www.openwall.com/lists/oss-security/2014/06/18/1 | mailing-listx_refsource_MLIST |
| http://www.openwall.com/lists/oss-security/2014/06/16/5 | mailing-listx_refsource_MLIST |
| https://github.com/yarrick/iodine/blob/b715be5cf3… | x_refsource_CONFIRM |
| http://www.debian.org/security/2014/dsa-2964 | vendor-advisoryx_refsource_DEBIAN |
Date Public
2014-06-16 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T11:04:28.885Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "59417",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/59417"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751834"
},
{
"name": "[oss-security] 20140617 Re: CVE Request: iodine: authentication bypass by client",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2014/06/18/1"
},
{
"name": "[oss-security] 20140616 CVE Request: iodine: authentication bypass by client",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2014/06/16/5"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/yarrick/iodine/blob/b715be5cf3978fbe589b03b09c9398d0d791f850/CHANGELOG"
},
{
"name": "DSA-2964",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2014/dsa-2964"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2014-06-16T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "(1) iodined.c and (2) user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2014-07-03T16:57:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "59417",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/59417"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751834"
},
{
"name": "[oss-security] 20140617 Re: CVE Request: iodine: authentication bypass by client",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2014/06/18/1"
},
{
"name": "[oss-security] 20140616 CVE Request: iodine: authentication bypass by client",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2014/06/16/5"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/yarrick/iodine/blob/b715be5cf3978fbe589b03b09c9398d0d791f850/CHANGELOG"
},
{
"name": "DSA-2964",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2014/dsa-2964"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-4168",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "(1) iodined.c and (2) user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "59417",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/59417"
},
{
"name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751834",
"refsource": "CONFIRM",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751834"
},
{
"name": "[oss-security] 20140617 Re: CVE Request: iodine: authentication bypass by client",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2014/06/18/1"
},
{
"name": "[oss-security] 20140616 CVE Request: iodine: authentication bypass by client",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2014/06/16/5"
},
{
"name": "https://github.com/yarrick/iodine/blob/b715be5cf3978fbe589b03b09c9398d0d791f850/CHANGELOG",
"refsource": "CONFIRM",
"url": "https://github.com/yarrick/iodine/blob/b715be5cf3978fbe589b03b09c9398d0d791f850/CHANGELOG"
},
{
"name": "DSA-2964",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2014/dsa-2964"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2014-4168",
"datePublished": "2014-07-03T17:00:00.000Z",
"dateReserved": "2014-06-17T00:00:00.000Z",
"dateUpdated": "2024-08-06T11:04:28.885Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2014-4168 (GCVE-0-2014-4168)
Vulnerability from cvelistv5 – Published: 2014-07-03 17:00 – Updated: 2024-08-06 11:04
VLAI
EPSS
VEX
Summary
(1) iodined.c and (2) user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/59417 | third-party-advisoryx_refsource_SECUNIA |
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug… | x_refsource_CONFIRM |
| http://www.openwall.com/lists/oss-security/2014/06/18/1 | mailing-listx_refsource_MLIST |
| http://www.openwall.com/lists/oss-security/2014/06/16/5 | mailing-listx_refsource_MLIST |
| https://github.com/yarrick/iodine/blob/b715be5cf3… | x_refsource_CONFIRM |
| http://www.debian.org/security/2014/dsa-2964 | vendor-advisoryx_refsource_DEBIAN |
Date Public
2014-06-16 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T11:04:28.885Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "59417",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/59417"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751834"
},
{
"name": "[oss-security] 20140617 Re: CVE Request: iodine: authentication bypass by client",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2014/06/18/1"
},
{
"name": "[oss-security] 20140616 CVE Request: iodine: authentication bypass by client",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2014/06/16/5"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/yarrick/iodine/blob/b715be5cf3978fbe589b03b09c9398d0d791f850/CHANGELOG"
},
{
"name": "DSA-2964",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2014/dsa-2964"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2014-06-16T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "(1) iodined.c and (2) user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2014-07-03T16:57:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "59417",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/59417"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751834"
},
{
"name": "[oss-security] 20140617 Re: CVE Request: iodine: authentication bypass by client",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2014/06/18/1"
},
{
"name": "[oss-security] 20140616 CVE Request: iodine: authentication bypass by client",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2014/06/16/5"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/yarrick/iodine/blob/b715be5cf3978fbe589b03b09c9398d0d791f850/CHANGELOG"
},
{
"name": "DSA-2964",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2014/dsa-2964"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-4168",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "(1) iodined.c and (2) user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "59417",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/59417"
},
{
"name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751834",
"refsource": "CONFIRM",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751834"
},
{
"name": "[oss-security] 20140617 Re: CVE Request: iodine: authentication bypass by client",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2014/06/18/1"
},
{
"name": "[oss-security] 20140616 CVE Request: iodine: authentication bypass by client",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2014/06/16/5"
},
{
"name": "https://github.com/yarrick/iodine/blob/b715be5cf3978fbe589b03b09c9398d0d791f850/CHANGELOG",
"refsource": "CONFIRM",
"url": "https://github.com/yarrick/iodine/blob/b715be5cf3978fbe589b03b09c9398d0d791f850/CHANGELOG"
},
{
"name": "DSA-2964",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2014/dsa-2964"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2014-4168",
"datePublished": "2014-07-03T17:00:00.000Z",
"dateReserved": "2014-06-17T00:00:00.000Z",
"dateUpdated": "2024-08-06T11:04:28.885Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}