Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

TrouSerS tcsd service can crash from special network packet

CVE-2012-0698 · published 13 years ago
Summary

The TrouSerS software that handles security tokens can be forced to stop working if it receives a specially crafted network packet on port 30003. This could temporarily interrupt any applications that rely on the service. Update the software to version 0.3.10 or later, or block traffic to that port, to prevent the crash.

What to do
  • Update debian trousers to version 0.3.9-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian trousers < 0.3.9-1
Fix: upgrade to 0.3.9-1
Debian:13 debian trousers < 0.3.9-1
Fix: upgrade to 0.3.9-1
Debian:14 debian trousers < 0.3.9-1
Fix: upgrade to 0.3.9-1
– trustedcomputinggroup trousers <= 0.3.9
0.2.8
0.2.9
0.2.9.1
0.2.9.2
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.3.6
2 more version ranges
cpe:2.3:a:trustedcomputinggroup:trousers:*:*:*:*:*:*:*:*
Original advisory text
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_offset value in a TCP packet to port 30003.
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_offset value in a TCP packet to port 30003.
References
Severity
5.0 Medium
Exploitation
11% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published26 Nov 2012
Updated19 Oct 2026
First seen5 Sep 2026
Sources
DEBIAN-CVE-2012-0698 · OSV
CVE-2012-0698 · NVD
Track software like this
Free during beta