PT-2007-5737 · Mcstrans+1 · Mcstrans+1

Published 2007-11-07 · Updated 2017-09-29 · CVE-2007-4570

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions mcstrans version 0.2.3

Description The issue is related to algorithmic complexity in the MCS translation daemon, allowing local users to cause a denial of service by triggering a temporary daemon outage. This can be achieved by providing a large range of compartments in sensitivity labels.

Recommendations For mcstrans version 0.2.3, consider restricting the range of compartments in sensitivity labels to prevent the denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-4570

RHSA-2007:0542

RHSA-2007_0542

Affected Products

Red Hat

Mcstrans

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2007-4570 · Security Note
• http://secunia.com/advisories/27589 · Note
• http://osvdb.org/39244 · Note
• https://bugzilla.redhat.com/attachment.cgi?id=193951 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=288201 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38357 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10350 · Note
• https://rhn.redhat.com/errata/RHSA-2007-0542.html · Patch, Vendor Advisory
• http://securityfocus.com/bid/26371 · Note
• https://access.redhat.com/security/cve/CVE-2007-4570 · Note
• https://access.redhat.com/errata/RHSA-2007:0542 · Note