PT-2007-4651 · Red Hat · Redhat-Cluster-Suite+1

Published 2007-06-25 · Updated 2017-10-11 · CVE-2007-3374

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions redhat-cluster-suite versions prior to 20070622

Description The issue is related to a buffer overflow in the cluster/cman/daemon/daemon.c file of the redhat-cluster-suite, which can be triggered by local users sending long client messages. This can cause a denial of service, resulting in a crash, and potentially allow the execution of arbitrary code.

Recommendations For versions prior to 20070622, update to a version released after 20070622 to resolve the issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-3374

RHSA-2007:0559

RHSA-2007_0559

Affected Products

Red Hat

Redhat-Cluster-Suite

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2007-3374 · Security Note
• http://secunia.com/advisories/25886 · Vendor Advisory
• https://redhat.com/archives/cluster-devel/2007-June/msg00130.html · Patch
• http://secunia.com/advisories/25818 · Vendor Advisory
• http://secunia.com/advisories/25799 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2007-0559.html · Vendor Advisory
• https://launchpad.net/bugs/121780 · Patch
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9524 · Note
• https://access.redhat.com/errata/RHSA-2007:0559 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35034 · Note
• http://securityfocus.com/bid/24595 · Note
• https://access.redhat.com/security/cve/CVE-2007-3374 · Note
• http://sourceware.org/cgi-bin/cvsweb.cgi/cluster/cman/daemon/daemon.c.diff?cvsroot=cluster&r1=1.34&r2=1.35 · Note
• http://osvdb.org/37497 · Note
• http://securitytracker.com/id?1018323 · Note