Vulnerability Name: | CVE-2007-3223 (CCN-34857) | ||||||||
Assigned: | 2007-06-13 | ||||||||
Published: | 2007-06-13 | ||||||||
Updated: | 2018-10-30 | ||||||||
Summary: | Unspecified vulnerability in the NFS server in Sun Solaris 10 before 20070613 allows remote attackers to cause a denial of service (system crash) via certain XDR data in NFS requests, probably related to processing of data by the xdr_bool and xdrmblk_getint32 functions. | ||||||||
CVSS v3 Severity: | 5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
| ||||||||
CVSS v2 Severity: | 7.8 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C) 5.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
4.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
| ||||||||
Vulnerability Type: | CWE-Other | ||||||||
Vulnerability Consequences: | Denial of Service | ||||||||
References: | Source: MITRE Type: CNA CVE-2007-3223 Source: OSVDB Type: UNKNOWN 36592 Source: CCN Type: SA25668 Sun Solaris 10 NFS XDR Handling Vulnerability Source: SECUNIA Type: Patch, Vendor Advisory 25668 Source: CCN Type: SECTRACK ID: 1018253 Solaris NFS Bug in Processing XDR Data Lets Remote Users Deny Service Source: CCN Type: Sun Alert ID: 102965 A Security Vulnerability in Solaris 10 NFS XDR Handling May Allow a Denial of Service to NFS Servers Source: SUNALERT Type: Patch 102965 Source: CCN Type: ASA-2007-271 A Security Vulnerability in Solaris 10 NFS XDR Handling May Allow a Denial of Service to NFS Servers (Sun 102965) Source: CCN Type: OSVDB ID: 36592 Solaris NFS Server XDR Handling Unspecified Remote DoS Source: BID Type: UNKNOWN 24466 Source: CCN Type: BID-24466 Sun Solaris NFS Server XDR Handling Denial of Service Vulnerability Source: SECTRACK Type: UNKNOWN 1018253 Source: VUPEN Type: UNKNOWN ADV-2007-2190 Source: XF Type: UNKNOWN solaris-nfs-xdr-dos(34857) Source: XF Type: UNKNOWN solaris-nfs-xdr-dos(34857) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:1092 | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: ![]() | ||||||||
Oval Definitions | |||||||||
| |||||||||
BACK |