CVE-2016-20044 - Vulnerability Analysis

Overview

PInfo 0.6.9-5.1 contains a buffer overflow caused by an oversized argument to the -m parameter, letting local attackers execute arbitrary code with user privileges, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code with user privileges, potentially compromising the system.

Mitigation

Update to the latest version.

References

• http://pinfo.alioth.debian.org/
• https://www.exploit-db.com/exploits/40023
• https://www.vulncheck.com/advisories/pinfo-local-buffer-overflow-via-m-parameter

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner