What’s Vulnerable › Vulnerabilities

CVE-2008-7232

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 24.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-09-14 · updated 2026-06-16
• Weakness: CWE-119

Description

Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command.

Affected products

• Netplex-Tech Xtacacsd: through 4.1.2; 2.0, 3.0, 3.1, 3.2, 3.3, 3.4 (+4)

References

• http://aluigi.altervista.org/adv/xtacacsdz-adv.txt
• http://aluigi.org/poc/xtacacsdz.zip
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39551
• http://aluigi.altervista.org/adv/xtacacsdz-adv.txt
• http://aluigi.org/poc/xtacacsdz.zip
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39551

Get alerted when CVE-2008-7232 or the next vulnerability affects your stack