CVE-2007-3373

daemon.c in cman (redhat-cluster-suite) before 20070622 does not clear a buffer for reading requests, which might allow local users to obtain sensitive information from previous requests.
Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:cluster_suite:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:33

Type Values Removed Values Added
References () http://osvdb.org/45381 - () http://osvdb.org/45381 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/35152 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/35152 -
References () https://www.redhat.com/archives/cluster-devel/2007-June/msg00130.html - Patch () https://www.redhat.com/archives/cluster-devel/2007-June/msg00130.html - Patch

Information

Published : 2007-06-25 19:30

Updated : 2024-11-21 00:33


NVD link : CVE-2007-3373

Mitre link : CVE-2007-3373

CVE.ORG link : CVE-2007-3373


JSON object : View

Products Affected

redhat

  • cluster_suite
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer