PT-2007-1073 · Ulogd+1 · Ulogd+1

Published 2007-01-24 · Updated 2010-09-15 · CVE-2007-0460

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: ulogd versions prior to 1.23-r1 SUSE Linux versions 9.3 through 10.1

Description: The issue is related to multiple buffer overflows in ulogd due to improper string length calculations. This can potentially lead to disruption of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.

Recommendations: For ulogd versions prior to 1.23-r1, update to version 1.23-r1 or later. For SUSE Linux versions 9.3 through 10.1, consider upgrading to a newer version of SUSE Linux that is not affected by this issue, or apply any available patches or workarounds provided by the vendor.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-09551

CVE-2007-0460

Affected Products

Suse Linux

Ulogd

References · 9

• https://bdu.fstec.ru/vul/2015-09551 · Security Note
• http://secunia.com/advisories/24524 · Vendor Advisory
• http://secunia.com/advisories/23863 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200703-17.xml · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:028 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0460 · Security Note
• http://novell.com/linux/security/advisories/2007_01_sr.html · Vendor Advisory
• http://securityfocus.com/bid/22139 · Note
• http://osvdb.org/32939 · Note