CVE-2007-3695

Buffer overflow in LICRCMD.EXE in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.1 allows attackers to execute arbitrary code via a long filename. NOTE: the researcher does not suggest any circumstances in which the filename would come from an untrusted source, and therefore perhaps the issue does not cross privilege boundaries and should not be included in CVE.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://osvdb.org/39597
http://www.eleytt.com/advisories/eleytt_ALLFUSIONLICRCMD.pdf	Vendor Advisory
http://www.securityfocus.com/bid/24817

Configurations

Configuration 1 (hide)

cpe:2.3:a:broadcom:erwin_process_modeler:7.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-07-11 22:30

Updated : 2024-02-28 11:01

NVD link : CVE-2007-3695

Mitre link : CVE-2007-3695

CVE.ORG link : CVE-2007-3695

JSON object : View

Products Affected

broadcom

erwin_process_modeler

CWE

NVD-CWE-Other

{"id": "CVE-2007-3695", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-07-11T22:30:00.000", "references": [{"url": "http://osvdb.org/39597", "source": "cve@mitre.org"}, {"url": "http://www.eleytt.com/advisories/eleytt_ALLFUSIONLICRCMD.pdf", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/24817", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in LICRCMD.EXE in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.1 allows attackers to execute arbitrary code via a long filename. NOTE: the researcher does not suggest any circumstances in which the filename would come from an untrusted source, and therefore perhaps the issue does not cross privilege boundaries and should not be included in CVE."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en LICRCMD.EXE in CA ERwin Process Modeler (anteriormente llamado AllFusion Process Modeler) 7.1 permite a atacantes ejecutar c\u00f3digo de su elecci\u00f3n mediante un nombre de fichero largo.\r\nNOTA: El investigador no sugiere ninguna circunstancia en la cual el nombre del fichero podr\u00eda proceder de una fuente no fiable, y por tanto quiz\u00e1s este asunto no cruza fronteras de privilegios y no debiera estar incluido en CVE."}], "lastModified": "2021-04-09T13:53:07.580", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:broadcom:erwin_process_modeler:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE18FE31-5230-4517-B06A-28697BD108D3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}