PT-2007-6708 · Nufw · Nufw

Published 2007-10-30 · Updated 2017-07-29 · CVE-2007-5723

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions NuFW versions prior to 2.2.7

Description A heap-based buffer overflow issue exists in the samp send function in nuauth/sasl.c, allowing remote attackers to cause a denial of service via unspecified input on which base64 encoding is performed.

Recommendations For versions prior to 2.2.7, update to version 2.2.7 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-5723

DTSA-82-1

Affected Products

Nufw

References · 6

• http://secunia.com/advisories/27442 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5723 · Security Note
• http://securityfocus.com/bid/26251 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38153 · Note
• http://osvdb.org/39724 · Note
• http://nufw.org/+NuFW-2-2-7%2C207+.html · Note