PT-2007-5737 · Mcstrans+1 · Mcstrans+1

Publicado 2007-11-07 · Atualizado 2017-09-29 · CVE-2007-4570

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions mcstrans version 0.2.3

Description The issue is related to algorithmic complexity in the MCS translation daemon, allowing local users to cause a denial of service by triggering a temporary daemon outage. This can be achieved by providing a large range of compartments in sensitivity labels.

Recommendations For mcstrans version 0.2.3, consider restricting the range of compartments in sensitivity labels to prevent the denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-4570

RHSA-2007:0542

RHSA-2007_0542

Produtos afetados

Red Hat

Mcstrans

Referências · 11

• http://secunia.com/advisories/27589 · Nota
• http://osvdb.org/39244 · Nota
• https://bugzilla.redhat.com/attachment.cgi?id=193951 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=288201 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38357 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10350 · Nota
• https://rhn.redhat.com/errata/RHSA-2007-0542.html · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-4570 · Nota de Segurança
• http://securityfocus.com/bid/26371 · Nota
• https://access.redhat.com/security/cve/CVE-2007-4570 · Nota
• https://access.redhat.com/errata/RHSA-2007:0542 · Nota