Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via an empty username in the "Author" field in a commit.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2012-10-10T18:00:00
Updated: 2013-01-29T10:00:00
Reserved: 2012-08-21T00:00:00
Link: CVE-2012-4465
JSON object: View
NVD Information
Status : Modified
Published: 2012-10-10T18:55:05.207
Modified: 2013-01-30T04:54:55.523
Link: CVE-2012-4465
JSON object: View
Redhat Information
No data.
CWE