CVE

Id
23437  
CVE No.
CVE-2007-0080  
Status
Candidate  
Description
** DISPUTED ** Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the server desthost field of an SMB_Handle_Type instance. NOTE: the impact of this issue has been disputed by a reliable third party and the vendor, who states that exploitation is limited "only to local administrators who have write access to the server configuration files." CVE concurs with the dispute.  
Phase
Assigned (20070104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
226660 23437 CVE-2007-0080 BUGTRAQ:20070102 FreeRadius 1.1.3 SMB_Handle_Type SMB_Connect_Server arbitrary code execution  View
226661 23437 CVE-2007-0080 URL:http://www.securityfocus.com/archive/1/archive/1/455678/100/0/threaded  View
226662 23437 CVE-2007-0080 BUGTRAQ:20070103 Re: FreeRadius 1.1.3 SMB_Handle_Type SMB_Connect_Server arbitrary code execution  View
226663 23437 CVE-2007-0080 URL:http://www.securityfocus.com/archive/1/455812/100/0/threaded  View
226664 23437 CVE-2007-0080 MISC:http://www.freeradius.org/security.html  View
226665 23437 CVE-2007-0080 VIM:20070211 FreeRADIUS dispute of CVE-2007-0080  View
226666 23437 CVE-2007-0080 URL:http://www.attrition.org/pipermail/vim/2007-February/001304.html  View
226667 23437 CVE-2007-0080 OSVDB:32082  View
226668 23437 CVE-2007-0080 URL:http://osvdb.org/32082  View
226669 23437 CVE-2007-0080 SECTRACK:1017463  View
226670 23437 CVE-2007-0080 URL:http://securitytracker.com/id?1017463  View
226671 23437 CVE-2007-0080 XF:freeradius-smbconnectserver-bo(31248)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54477 JVNDB-2007-003169 IMGallery の users_adm/start1.php における任意の PHP スクリプトをアップロードされる脆弱性 IMGallery の users_adm/start1.php は、複数の拡張子を持つファイルを適切に処理しないため、任意の PHP スクリプトをアップロードおよび実行される脆弱性が存在します。 CVE-2007-0082 23437 6.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003169.html  View