CVE-2007-1523

Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an unknown impact. NOTE: this information is based upon a vague pre-advisory with no actionable information. Details will be updated after 20070329.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://kernelwars.blogspot.com/2007/01/alive.html	Vendor Advisory
http://osvdb.org/34593
http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson	Vendor Advisory
http://www.securityfocus.com/bid/22945

Configurations

Configuration 1 (hide)

cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-03-20 20:19

Updated : 2023-12-10 10:40

NVD link : CVE-2007-1523

Mitre link : CVE-2007-1523

CVE.ORG link : CVE-2007-1523

JSON object : View

Products Affected

netbsd

netbsd

CWE

NVD-CWE-Other

{"id": "CVE-2007-1523", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2007-03-20T20:19:00.000", "references": [{"url": "http://kernelwars.blogspot.com/2007/01/alive.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/34593", "source": "cve@mitre.org"}, {"url": "http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22945", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an unknown impact. NOTE: this information is based upon a vague pre-advisory with no actionable information. Details will be updated after 20070329."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en el kernel de NetBSD 3.0, ciertas versiones de FreeBSD y OpenBSD, y posiblemente otras derivada de BSD de sistemas operativos permite a usuarios locales tener un impacto desconocido. NOTA: \t\r\nesta informaci\u00f3n se basa en una pre-consulta vaga sin la informaci\u00f3n procesable. Los detalles ser\u00e1n actualizados despu\u00e9s de 20070329."}], "lastModified": "2013-08-28T05:28:32.817", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9CABFAA-594C-45D7-A0C7-795872A0C68A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}