gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.
2003-06-09T04:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | debian | debian_linux | 0.9.1 | Yes |
Operating System | debian | debian_linux | 0.9.2 | Yes |
Operating System | debian | debian_linux | 0.9.3 | Yes |
Operating System | debian | debian_linux | 0.9.4 | Yes |