PT-2007-4651 · Red Hat · Redhat-Cluster-Suite+1

Publicado 2007-06-25 · Atualizado 2017-10-11 · CVE-2007-3374

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions redhat-cluster-suite versions prior to 20070622

Description The issue is related to a buffer overflow in the cluster/cman/daemon/daemon.c file of the redhat-cluster-suite, which can be triggered by local users sending long client messages. This can cause a denial of service, resulting in a crash, and potentially allow the execution of arbitrary code.

Recommendations For versions prior to 20070622, update to a version released after 20070622 to resolve the issue.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-3374

RHSA-2007:0559

RHSA-2007_0559

Produtos afetados

Red Hat

Redhat-Cluster-Suite

Referências · 16

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9524 · Nota
• https://access.redhat.com/errata/RHSA-2007:0559 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35034 · Nota
• http://securityfocus.com/bid/24595 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3374 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2007-3374 · Nota
• http://secunia.com/advisories/25886 · Aviso do Fabricante
• https://redhat.com/archives/cluster-devel/2007-June/msg00130.html · Correção
• http://secunia.com/advisories/25818 · Aviso do Fabricante
• http://sourceware.org/cgi-bin/cvsweb.cgi/cluster/cman/daemon/daemon.c.diff?cvsroot=cluster&r1=1.34&r2=1.35 · Nota
• http://osvdb.org/37497 · Nota
• http://securitytracker.com/id?1018323 · Nota
• http://secunia.com/advisories/25799 · Aviso do Fabricante
• http://ubuntu.com/usn/usn-476-1 · Correção, Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2007-0559.html · Aviso do Fabricante