Vulnerability Name:

CVE-2007-0235 (CCN-31522)

Assigned:2007-01-14
Published:2007-01-14
Updated:2017-10-11
Summary:Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a process with a long filename that is mapped in its address space, which triggers the overflow in gnome-system-monitor.
CVSS v3 Severity:8.1 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:3.7 Low (CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P)
2.7 Low (Temporal CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): High
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
6.2 Medium (CCN CVSS v2 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C)
4.6 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-119
Vulnerability Consequences:Gain Privileges
References:Source: CCN
Type: GNOME Bugzilla Web site
Bug 396477 - stack overflow in sysdeps/linux/procmap.c: glibtop_get_proc_map_s()

Source: CONFIRM
Type: UNKNOWN
http://bugzilla.gnome.org/show_bug.cgi?id=396477

Source: MITRE
Type: CNA
CVE-2007-0235

Source: CCN
Type: GNOME Web site
libgtop-2.14.6.news

Source: CONFIRM
Type: UNKNOWN
http://ftp.gnome.org/pub/gnome/sources/libgtop/2.14/libgtop-2.14.6.news

Source: OSVDB
Type: UNKNOWN
32815

Source: CCN
Type: RHSA-2007-0765
Moderate: libgtop2 security update

Source: CCN
Type: SA23736
libgtop2 "glibtop_get_proc_map_s()" Buffer Overflow

Source: SECUNIA
Type: Vendor Advisory
23736

Source: SECUNIA
Type: Vendor Advisory
23777

Source: SECUNIA
Type: Vendor Advisory
23814

Source: SECUNIA
Type: Vendor Advisory
23840

Source: SECUNIA
Type: Vendor Advisory
23872

Source: SECUNIA
Type: Vendor Advisory
24015

Source: SECUNIA
Type: UNKNOWN
26367

Source: GENTOO
Type: UNKNOWN
GLSA-200701-17

Source: CCN
Type: SECTRACK ID: 1018526
LibGTop Buffer Overflow in glibtop_get_proc_map_s() May Let Local Users Execute Arbitrary Code

Source: CCN
Type: ASA-2007-350
libgtop2 security update (RHSA-2007-0765)

Source: DEBIAN
Type: UNKNOWN
DSA-1255

Source: DEBIAN
Type: DSA-1255
libgtop2 -- buffer overflow

Source: CCN
Type: GLSA-200701-17
libgtop: Privilege escalation

Source: MANDRIVA
Type: UNKNOWN
MDKSA-2007:023

Source: CCN
Type: OSVDB ID: 32815
libgtop2 glibtop_get_proc_map_s() Function Filename Overflow

Source: REDHAT
Type: UNKNOWN
RHSA-2007:0765

Source: BID
Type: UNKNOWN
22054

Source: CCN
Type: BID-22054
Libgtop2 Library Local Buffer Overflow Vulnerability

Source: SECTRACK
Type: UNKNOWN
1018526

Source: CCN
Type: USN-407-1
libgtop2 vulnerability

Source: UBUNTU
Type: UNKNOWN
USN-407-1

Source: VUPEN
Type: UNKNOWN
ADV-2007-0185

Source: VUPEN
Type: UNKNOWN
ADV-2007-0187

Source: XF
Type: UNKNOWN
libgtop2-glibtopbo(31522)

Source: XF
Type: UNKNOWN
libgtop2-glibtopbo(31522)

Source: CONFIRM
Type: UNKNOWN
https://issues.rpath.com/browse/RPL-972

Source: MISC
Type: UNKNOWN
https://launchpad.net/bugs/79206

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:10720

Vulnerable Configuration:Configuration 1:
  • cpe:/a:libgtop:libgtop:*:*:*:*:*:*:*:* (Version <= 2.14.5)

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20070235
    V
    		CVE-2007-0235
    2022-06-30
    oval:org.opensuse.security:def:42360
    P
    		Security update for xen (Important)
    2022-03-23
    oval:org.opensuse.security:def:26221
    P
    		Security update for python-numpy (Moderate) (in QA)
    2022-01-17
    oval:org.opensuse.security:def:112642
    P
    		libgtop-2.40.0-2.11 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:33115
    P
    		Security update for libsndfile (Important)
    2022-01-05
    oval:org.opensuse.security:def:31721
    P
    		Security update for log4j (Important)
    2021-12-17
    oval:org.opensuse.security:def:32240
    P
    		Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP3) (Important)
    2021-12-14
    oval:org.opensuse.security:def:26182
    P
    		Security update for MozillaFirefox (Important)
    2021-12-12
    oval:org.opensuse.security:def:31303
    P
    		Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)
    2021-11-19
    oval:org.opensuse.security:def:26166
    P
    		Security update for php74 (Moderate)
    2021-11-18
    oval:org.opensuse.security:def:106123
    P
    		libgtop-2.40.0-2.11 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:32196
    P
    		Security update for python-urllib3 (Moderate)
    2021-09-29
    oval:org.opensuse.security:def:31273
    P
    		Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) (Important)
    2021-09-23
    oval:org.opensuse.security:def:32174
    P
    		Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) (Important)
    2021-08-25
    oval:org.opensuse.security:def:31671
    P
    		Security update for openssl (Important)
    2021-08-24
    oval:org.opensuse.security:def:31669
    P
    		Security update for cpio (Important)
    2021-08-23
    oval:org.opensuse.security:def:31665
    P
    		Security update for libcares2 (Important)
    2021-08-16
    oval:org.opensuse.security:def:31658
    P
    		Security update for the Linux Kernel (Important)
    2021-07-22
    oval:org.opensuse.security:def:31657
    P
    		Security update for linuxptp (Important)
    2021-07-21
    oval:org.opensuse.security:def:31229
    P
    		Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)
    2021-07-21
    oval:org.opensuse.security:def:31218
    P
    		Security update for libsolv (Important)
    2021-06-28
    oval:org.opensuse.security:def:31217
    P
    		Security update for arpwatch (Important)
    2021-06-28
    oval:org.opensuse.security:def:26082
    P
    		Security update for openexr (Important)
    2021-06-24
    oval:org.opensuse.security:def:26080
    P
    		Security update for libnettle (Important)
    2021-06-23
    oval:org.opensuse.security:def:26078
    P
    		Security update for libxml2 (Moderate)
    2021-06-18
    oval:org.opensuse.security:def:26076
    P
    		Security update for webkit2gtk3 (Important)
    2021-06-17
    oval:org.opensuse.security:def:31638
    P
    		Security update for caribou (Important)
    2021-06-10
    oval:org.opensuse.security:def:36191
    P
    		libgtop-2.28.0-1.13.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36453
    P
    		libgtop-2_0-7-32bit-2.28.0-1.13.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:32111
    P
    		Security update for MozillaFirefox (Important)
    2021-06-08
    oval:org.opensuse.security:def:42598
    P
    		libgtop-2.28.0-1.13.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:32917
    P
    		Security update for python3 (Important)
    2021-05-17
    oval:org.opensuse.security:def:32086
    P
    		Security update for java-1_7_0-openjdk (Moderate)
    2021-04-29
    oval:org.opensuse.security:def:26032
    P
    		Security update for sudo (Important)
    2021-04-20
    oval:org.opensuse.security:def:31141
    P
    		Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP3) (Important)
    2021-04-07
    oval:org.opensuse.security:def:26025
    P
    		Security update for openexr (Moderate)
    2021-04-07
    oval:org.opensuse.security:def:31365
    P
    		Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3) (Important)
    2021-03-17
    oval:org.opensuse.security:def:31743
    P
    		Security update for python (Moderate)
    2021-03-16
    oval:org.opensuse.security:def:26206
    P
    		Security update for the Linux Kernel (Important)
    2021-03-09
    oval:org.opensuse.security:def:42156
    P
    		Security update for the Linux Kernel (Important)
    2021-03-09
    oval:org.opensuse.security:def:32267
    P
    		Security update for grub2 (Important)
    2021-03-02
    oval:org.opensuse.security:def:31730
    P
    		Security update for bind (Important)
    2021-02-18
    oval:org.opensuse.security:def:32135
    P
    		Security update for postgresql, postgresql12, postgresql13 (Important)
    2021-01-26
    oval:org.opensuse.security:def:26133
    P
    		Security update for java-1_8_0-ibm (Moderate)
    2021-01-05
    oval:org.opensuse.security:def:25979
    P
    		Security update for xen (Moderate)
    2020-12-18
    oval:org.opensuse.security:def:35749
    P
    		libgtop-2.28.0-1.2.20 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:41994
    P
    		libgtop-2.28.0-1.2.20 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35953
    P
    		libgtop-2.28.0-1.9.24 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35587
    P
    		libgtop-2.28.0-1.2.20 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:25930
    P
    		Security update for ImageMagick (Important)
    2020-12-01
    oval:org.opensuse.security:def:31993
    P
    		Security update for java-1_7_1-ibm (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25301
    P
    		Security update for grub2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26317
    P
    		Security update for chromium (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32411
    P
    		Security update for wireshark (Low)
    2020-12-01
    oval:org.opensuse.security:def:32552
    P
    		libgtop on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25740
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31509
    P
    		Security update for python27 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26018
    P
    		Security update for freerdp (Important)
    2020-12-01
    oval:org.opensuse.security:def:32878
    P
    		guestfs-data on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25376
    P
    		Security update for dovecot22 (Important)
    2020-12-01
    oval:org.opensuse.security:def:31787
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26419
    P
    		Security update for mbedtls (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26552
    P
    		g3utils on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25752
    P
    		Security update for libreoffice (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25480
    P
    		Security update for mariadb-100 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31056
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25788
    P
    		Security update for zeromq (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32030
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26472
    P
    		Security update for Chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:31420
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25715
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31809
    P
    		Security update for apache2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26952
    P
    		libgtop on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25138
    P
    		Security update for dovecot22 (Important)
    2020-12-01
    oval:org.opensuse.security:def:25929
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27416
    P
    		gtk2-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31432
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26344
    P
    		Security update for mbedtls (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25817
    P
    		Security update for pidgin-otr (Important)
    2020-12-01
    oval:org.opensuse.security:def:32037
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25150
    P
    		Security update for ovmf (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31527
    P
    		Security update for Ruby
    2020-12-01
    oval:org.opensuse.security:def:25504
    P
    		Security update for libvirt (Important)
    2020-12-01
    oval:org.opensuse.security:def:31875
    P
    		Security update for dbus-1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26579
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25870
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:32714
    P
    		libgtop on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26002
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25342
    P
    		Security update for raptor (Important)
    2020-12-01
    oval:org.opensuse.security:def:25579
    P
    		Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:32024
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26681
    P
    		curl on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26714
    P
    		gstreamer-0_10-plugins-good on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26014
    P
    		Security update for mariadb (Important)
    2020-12-01
    oval:org.opensuse.security:def:25642
    P
    		Security update for blktrace (Low)
    2020-12-01
    oval:org.opensuse.security:def:31883
    P
    		Security update for dnsmasq (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26279
    P
    		Security update for gimp (Low)
    2020-12-01
    oval:org.opensuse.security:def:26734
    P
    		ldapsmb on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25877
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:31971
    P
    		Security update for jakarta-commons-collections (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27189
    P
    		libgtop on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25300
    P
    		Security update for dovecot22 (Important)
    2020-12-01
    oval:org.opensuse.security:def:32372
    P
    		Security update for tcpdump (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32513
    P
    		freetype2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31422
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25312
    P
    		Security update for libsolv (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26370
    P
    		Security update for mbedtls (Important)
    2020-12-01
    oval:org.opensuse.security:def:32433
    P
    		Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:25741
    P
    		Security update for vino (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25423
    P
    		Security update for mariadb (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31055
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25707
    P
    		Security update for java-1_7_1-ibm (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31874
    P
    		Security update for cyrus-imapd (Important)
    2020-12-01
    oval:org.opensuse.security:def:26458
    P
    		Security update for phpMyAdmin (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26587
    P
    		libgtop on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25816
    P
    		Security update for libqt4 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25564
    P
    		Security update for tomcat (Important)
    2020-12-01
    oval:org.opensuse.security:def:31770
    P
    		Security update for MozillaFirefox, mozilla-nss, mozilla-nspr (Important)
    2020-12-01
    oval:org.opensuse.security:def:26917
    P
    		hyper-v on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31067
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25845
    P
    		Security update for mariadb (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26516
    P
    		NetworkManager on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31421
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26287
    P
    		Security update for zeromq (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25768
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:31831
    P
    		Security update for bind (Important)
    2020-12-01
    oval:org.opensuse.security:def:25139
    P
    		Security update for sqlite3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31435
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:27451
    P
    		libgtop-2_0-7-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25503
    P
    		Security update for apache2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:31506
    P
    		Security update for python27 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26428
    P
    		Security update for redis (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25856
    P
    		Security update for gd (Important)
    2020-12-01
    oval:org.opensuse.security:def:32675
    P
    		gnome-screensaver on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25214
    P
    		Security update for transfig (Low)
    2020-12-01
    oval:org.opensuse.security:def:31584
    P
    		Security update for tcpdump
    2020-12-01
    oval:org.opensuse.security:def:32477
    P
    		Security update for zlib (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25515
    P
    		Security update for Mesa (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31967
    P
    		Security update for intel-SINIT (Important)
    2020-12-01
    oval:org.opensuse.security:def:26632
    P
    		puppet on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25914
    P
    		Security update for firebird (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26003
    P
    		Security update for yaml-cpp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25585
    P
    		Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:31827
    P
    		Security update for bind (Important)
    2020-12-01
    oval:org.opensuse.security:def:26235
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33154
    P
    		libgtop on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25944
    P
    		Security update for libplist (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26720
    P
    		java-1_4_2-ibm on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26749
    P
    		libgtop on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25726
    P
    		Security update for python36 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31932
    P
    		Security update for libX11 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27154
    P
    		kbd on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32323
    P
    		Security update for samba (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26778
    P
    		logrotate on GA media (Moderate)
    2020-12-01
    oval:org.mitre.oval:def:10720
    V
    		Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a process with a long filename that is mapped in its address space, which triggers the overflow in gnome-system-monitor.
    2013-04-29
    oval:com.redhat.rhsa:def:20070765
    P
    		RHSA-2007:0765: libgtop2 security update (Moderate)
    2007-08-07
    oval:org.debian:def:1255
    V
    		buffer overflow
    2007-01-31
    BACK
    libgtop libgtop *