Vulnerability CVE-2007-2881 - CERT Civis.Net

Vulnerability Name:

CVE-2007-2881 (CCN-34524)

Assigned:

2007-05-25

Published:

2007-05-25

Updated:

2017-07-29

Summary:

Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2007-2881

Source: IDEFENSE
Type: Patch
20070525 Sun Java System Web Proxy Multiple Buffer Overflow Vulnerabilities

Source: OSVDB
Type: UNKNOWN
35841

Source: CCN
Type: SA25405
Sun Java System Web Proxy Server SOCKS Module Buffer Overflows

Source: SECUNIA
Type: UNKNOWN
25405

Source: CCN
Type: SECTRACK ID: 1018130
Sun Java System Web Proxy Server Buffer Overflows in `sockd` Let Remote Users Execute Arbitrary Code

Source: CCN
Type: Sun Alert ID: 102927
Security Vulnerabilities in the SOCKS Module of Sun Java System Web Proxy Server 4.0

Source: SUNALERT
Type: Patch
102927

Source: CCN
Type: ASA-2007-210
Security Vulnerabilities in the SOCKS Module of Sun Java System Web Proxy Server 4.0 (Sun 102927)

Source: CCN
Type: US-CERT VU#746889
Sun Java System Web Proxy Server fails to properly process malformed packets

Source: CERT-VN
Type: US Government Resource
VU#746889

Source: CCN
Type: OSVDB ID: 35841
Sun Java Web Proxy Server SOCKS Support Multiple Remote Overflow

Source: BID
Type: UNKNOWN
24165

Source: CCN
Type: BID-24165
Sun Java Web Proxy Server Multiple Buffer Overflow Vulnerabilities

Source: SECTRACK
Type: UNKNOWN
1018130

Source: VUPEN
Type: UNKNOWN
ADV-2007-1957

Source: XF
Type: UNKNOWN
sun-java-web-socks-bo(34524)

Source: XF
Type: UNKNOWN
sun-java-web-socks-bo(34524)

Source: CCN
Type: iDefense Labs PUBLIC ADVISORY: 05.25.07
Sun Java System Web Proxy Multiple Buffer Overflow Vulnerabilities

Vulnerable Configuration:

Configuration 1:

cpe:/a:sun:java_system_web_proxy_server:*:*:*:*:*:*:*:* (Version <= 4.0.4)

Configuration CCN 1:

cpe:/a:sun:java_system_web_proxy_server:4.0:*:*:*:*:*:*:*

OR cpe:/a:sun:java_system_web_proxy_server:4.0.2:*:*:*:*:*:*:*

OR cpe:/a:sun:java_system_web_proxy_server:4.0.3:*:*:*:*:*:*:*

OR cpe:/a:sun:java_system_web_proxy_server:4.0.4:*:*:*:*:*:*:*

OR cpe:/a:sun:java_system_web_proxy_server:4.0:sp1:*:*:*:*:*:*

AND

cpe:/o:redhat:linux:3.0:*:*:*:*:*:*:*

OR cpe:/o:hp:hp-ux:11.00:*:*:*:*:*:*:*

OR cpe:/o:sun:solaris:8::x86:*:*:*:*:*

OR cpe:/o:microsoft:windows_2000_advanced_server:*:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux:2.1:*:*:*:*:*:*:*

OR cpe:/o:ibm:aix:4.3.3:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_2003_server:-::~~enterprise~~~:*:*:*:*:*

OR cpe:/o:sun:solaris:8::sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:9::x86:*:*:*:*:*

OR cpe:/o:microsoft:windows_2000:-:sp4:*:*:server:*:*:*

OR cpe:/o:sun:solaris:10::sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:10::x86:*:*:*:*:*

OR cpe:/o:sun:solaris:9::sparc:*:*:*:*:*

Denotes that component is vulnerable