A vulnerability was found in code-projects Hotel Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file hotelnew.c of the component Available Room Handler. The manipulation of the argument admin_entry leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
History

Tue, 10 Dec 2024 16:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:fabianros:hotel_management_system:1.0:*:*:*:*:*:*:*
Vendors & Products Fabianros
Fabianros hotel Management System

Tue, 10 Dec 2024 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Fabianros
Fabianros hotel Management System
Weaknesses CWE-787
CPEs cpe:2.3:a:fabianros:hotel_management_system:1.0:*:*:*:*:*:*:*
Vendors & Products Fabianros
Fabianros hotel Management System

Thu, 05 Dec 2024 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Code-projects
Code-projects hotel Management System
CPEs cpe:2.3:a:code-projects:hotel_management_system:1.0:*:*:*:*:*:*:*
Vendors & Products Code-projects
Code-projects hotel Management System
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 04 Dec 2024 23:45:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in code-projects Hotel Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file hotelnew.c of the component Available Room Handler. The manipulation of the argument admin_entry leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Title code-projects Hotel Management System Available Room hotelnew.c stack-based overflow
Weaknesses CWE-119
CWE-121
References
Metrics cvssV2_0

{'score': 4.3, 'vector': 'AV:L/AC:L/Au:S/C:P/I:P/A:P'}

cvssV3_0

{'score': 5.3, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'}

cvssV4_0

{'score': 4.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2024-12-04T23:31:06.740Z

Updated: 2024-12-05T15:22:39.219Z

Reserved: 2024-12-04T16:35:23.449Z

Link: CVE-2024-12186

cve-icon Vulnrichment

Updated: 2024-12-05T15:22:32.559Z

cve-icon NVD

Status : Analyzed

Published: 2024-12-05T00:15:18.887

Modified: 2024-12-10T15:52:39.487

Link: CVE-2024-12186

cve-icon Redhat

No data.