CVE-2007-5030

{"id": "CVE-2007-5030", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-09-21T19:17:00.000", "references": [{"url": "http://klub.com.pl/dhcpv6/", "source": "cve@mitre.org"}, {"url": "http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/40568", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26876", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/25726", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36684", "source": "cve@mitre.org"}, {"url": "http://klub.com.pl/dhcpv6/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/40568", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/26876", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/25726", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36684", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-189"}]}], "descriptions": [{"lang": "en", "value": "Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by (1) the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the (2) TClntMsg, (3) TClntOptIAAddress, (4) TClntOptIAPrefix, (5) TOptVendorSpecInfo, and (6) TOptOptionRequest constructors; and the (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, and (9) TSrvIfaceMgr::decodeRelayForw methods."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de entero en Dibbler 0.6.0 permiten a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de demonio) mediante paquetes conteniendo opciones con grades longitudes, que disparan intentos de alojamiento de memoria excesivos, como se demuestra con (1) el constructor TSrvMsg en SrvMessages/SrvMsg.cpp; los constructores (2) TClntMsg, (3) TClntOptIAAddress, (4) TClntOptIAPrefix, (5) TOptVendorSpecInfo, y (6) TOptOptionRequest; y los m\u00e9todos (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, y (9) TSrvIfaceMgr::decodeRelayForw."}], "lastModified": "2024-11-21T00:36:58.827", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dibbler:dibbler:0.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "895CD1B1-B4EE-442A-967A-DF5099212BDB"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}