PT-2007-1073 · Ulogd+1 · Ulogd+1

Publicado 2007-01-24 · Atualizado 2010-09-15 · CVE-2007-0460

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: ulogd versions prior to 1.23-r1 SUSE Linux versions 9.3 through 10.1

Description: The issue is related to multiple buffer overflows in ulogd due to improper string length calculations. This can potentially lead to disruption of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.

Recommendations: For ulogd versions prior to 1.23-r1, update to version 1.23-r1 or later. For SUSE Linux versions 9.3 through 10.1, consider upgrading to a newer version of SUSE Linux that is not affected by this issue, or apply any available patches or workarounds provided by the vendor.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-09551

CVE-2007-0460

Produtos afetados

Suse Linux

Ulogd

Referências · 9

• http://securityfocus.com/bid/22139 · Nota
• https://bdu.fstec.ru/vul/2015-09551 · Nota de Segurança
• http://secunia.com/advisories/24524 · Aviso do Fabricante
• http://osvdb.org/32939 · Nota
• http://secunia.com/advisories/23863 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200703-17.xml · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2007:028 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-0460 · Nota de Segurança
• http://novell.com/linux/security/advisories/2007_01_sr.html · Aviso do Fabricante