PT-2007-2760 · Openbsd · Openbsd

Published 2007-03-10 · Updated 2016-10-18 · CVE-2007-1365

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenBSD versions 3.9 through 4.0

Description The issue is related to a buffer overflow in the kern/uipc mbuf2.c file, which allows remote attackers to execute arbitrary code via fragmented IPv6 packets. This is due to incorrect mbuf handling for ICMP6 packets.

Recommendations For OpenBSD versions 3.9 through 4.0, update to a version that includes the fix for the buffer overflow issue in kern/uipc mbuf2.c to prevent remote code execution via fragmented IPv6 packets.

Exploit

Fix

Related Identifiers

CVE-2007-1365

Affected Products

Openbsd

References · 12

• 🔥 https://exploit-db.com/exploits/29725 · Exploit
• http://secunia.com/advisories/24490 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1365 · Security Note
• http://openbsd.org/errata40.html#m_dup1 · Vendor Advisory
• http://openbsd.org/errata39.html#m_dup1 · Patch, Vendor Advisory
• http://securitytracker.com/id?1017735 · Note
• http://securitytracker.com/id?1017744 · Note
• http://osvdb.org/33050 · Note
• http://kb.cert.org/vuls/id/986425 · Note
• http://marc.info/?l=openbsd-cvs&m=117252151023868&w=2 · Note
• http://securityfocus.com/bid/22901 · Note
• http://coresecurity.com/?action=item&id=1703 · Note