PT-2007-6135 · Dibbler · Dibbler

Published 2007-09-21 · Updated 2017-07-29 · CVE-2007-5030

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Dibbler version 0.6.0

Description The issue is related to multiple integer overflows that can be triggered by remote attackers sending packets with options of large lengths. This can cause the daemon to crash due to attempts at excessive memory allocation. The overflows are demonstrated in various constructors and methods, including the TSrvMsg constructor, TClntMsg, TClntOptIAAddress, TClntOptIAPrefix, TOptVendorSpecInfo, and TOptOptionRequest constructors, as well as the TRelIfaceMgr::decodeRelayRepl, TRelMsg::decodeOpts, and TSrvIfaceMgr::decodeRelayForw methods.

Recommendations For Dibbler version 0.6.0, consider disabling the affected constructors and methods, such as the TSrvMsg constructor, TClntMsg, TClntOptIAAddress, TClntOptIAPrefix, TOptVendorSpecInfo, and TOptOptionRequest constructors, as well as the TRelIfaceMgr::decodeRelayRepl, TRelMsg::decodeOpts, and TSrvIfaceMgr::decodeRelayForw methods, until a patch is available. Restrict access to the vulnerable parts of the code to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2007-5030

Affected Products

Dibbler

References · 11

• http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-5030 · Vendor Advisory
• http://secunia.com/advisories/26876 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-5030 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-5030 · Vendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html · Vendor Advisory
• http://securityfocus.com/bid/25726 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-5030 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36684 · Note
• http://osvdb.org/40568 · Note
• http://klub.com.pl/dhcpv6 · Note