header-logo
Suggest Exploit
vendor:
mcrypt
by:
_ishikawa
7,8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: mcrypt
Affected Version From: 2.6.8
Affected Version To: 2.6.8
Patch Exists: YES
Related CWE: N/A
CPE: mcrypt
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Ubuntu 12.04.1
2012

mcrypt <= 2.6.8 stack-based buffer overflow poc

mcrypt is a command line tool for encrypting and decrypting files. It contains a stack-based buffer overflow vulnerability when decrypting .nc files with too long salt data. This vulnerability can be exploited by a malicious user to execute arbitrary code.

Mitigation:

Upgrade to the latest version of mcrypt.
Source

Exploit-DB raw data: