Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: GLSA-202309-17 Normal: Security Concern in Credential Encryption

gentoo
Calendar Grey March 6, 2005
Scroller Gentoo
Hashcash in Gentoo is susceptible to a format string vulnerability, allowing malicious actors to run unauthorized code. Users should upgrade promptly.
A format string vulnerability in the Hashcash utility could allow an attacker to execute arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200503-12 https://security.gentoo.org/ Severity: Normal Title: Hashcash: Format string vulnerability Date: March 06, 2005 Bugs: #83541 ID: 200503-12

Synopsis ======= A format string vulnerability in the Hashcash utility could allow an attacker to execute arbitrary code.
Background ========= Hashcash is a utility for generating Hashcash tokens, a proof-of-work system to reduce the impact of spam.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/hashcash < 1.16-r1 >= 1.16-r1
========== Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw in the Hashcash utility that an attacker could expose b...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo format string hashcash normal

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo format string hashcash normal

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround