Beveiligingsadvies

CVE-2008-3323

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-07-28 17:00:00
Laatst bijgewerkt 2024-08-07 09:37:26
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arbitrary code via a package list containing the MD5 checksum of a Trojan horse package.