PT-2007-2760 · Openbsd · Openbsd

Publicado 2007-03-10 · Atualizado 2016-10-18 · CVE-2007-1365

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenBSD versions 3.9 through 4.0

Description The issue is related to a buffer overflow in the kern/uipc mbuf2.c file, which allows remote attackers to execute arbitrary code via fragmented IPv6 packets. This is due to incorrect mbuf handling for ICMP6 packets.

Recommendations For OpenBSD versions 3.9 through 4.0, update to a version that includes the fix for the buffer overflow issue in kern/uipc mbuf2.c to prevent remote code execution via fragmented IPv6 packets.

Exploit

Correção

Identificadores relacionados

CVE-2007-1365

Produtos afetados

Openbsd

Referências · 12

• 🔥 https://exploit-db.com/exploits/29725 · Exploit
• http://openbsd.org/errata39.html#m_dup1 · Correção, Aviso do Fabricante
• http://securitytracker.com/id?1017735 · Nota
• http://securitytracker.com/id?1017744 · Nota
• http://osvdb.org/33050 · Nota
• http://secunia.com/advisories/24490 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-1365 · Nota de Segurança
• http://kb.cert.org/vuls/id/986425 · Nota
• http://marc.info/?l=openbsd-cvs&m=117252151023868&w=2 · Nota
• http://securityfocus.com/bid/22901 · Nota
• http://openbsd.org/errata40.html#m_dup1 · Aviso do Fabricante
• http://coresecurity.com/?action=item&id=1703 · Nota