| Vulnerability Name: | CVE-2007-6562 (CCN-39241) | ||||||||||||||||
| Assigned: | 2007-12-25 | ||||||||||||||||
| Published: | 2007-12-25 | ||||||||||||||||
| Updated: | 2017-08-08 | ||||||||||||||||
| Summary: | Multiple stack-based buffer overflows in the use of FD_SET in TCPreen before 1.4.4 allow remote attackers to cause a denial of service via multiple concurrent connections, which result in overflows in the (1) SocketAddress::Connect function in libsolve/sockprot.cpp and (2) monitor_bridge function in src/bridge.cpp. | ||||||||||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P) 3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||
| Vulnerability Type: | CWE-119 | ||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||
| References: | Source: CCN Type: TCPreen RELEASE NOTES STABLE RELEASE 1.4.4 : Minor security fix Source: CONFIRM Type: UNKNOWN http://anonsvn.remlab.net/svn/tcpreen/tags/1.4.4/NEWS Source: MITRE Type: CNA CVE-2007-6562 Source: OSVDB Type: UNKNOWN 40317 Source: OSVDB Type: UNKNOWN 40318 Source: CCN Type: SA28217 TCPreen FD_SET Buffer Overflow Vulnerability Source: SECUNIA Type: Vendor Advisory 28217 Source: SECUNIA Type: UNKNOWN 28254 Source: DEBIAN Type: UNKNOWN DSA-1443 Source: DEBIAN Type: DSA-1443 tcpreen -- buffer overflows Source: CCN Type: OSVDB ID: 40317 TCPreen FD_SET libsolve/sockprot.cpp SocketAddress::Connect Function Saturation Remote DoS Source: CCN Type: OSVDB ID: 40318 TCPreen FD_SET src/bridge.cpp monitor_bridge Function Saturation Remote DoS Source: CCN Type: TCPreen Web page TCPreen Source: BID Type: Patch 27018 Source: CCN Type: BID-27018 TCPreen 'FD_SET()' Remote Buffer Overflow Vulnerability Source: VUPEN Type: UNKNOWN ADV-2007-4318 Source: XF Type: UNKNOWN tcpreen-fdset-bo(39241) Source: XF Type: UNKNOWN tcpreen-fdset-bo(39241) | ||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||||||
| Oval Definitions | |||||||||||||||||
| |||||||||||||||||
| BACK | |||||||||||||||||