CVE

Id
25350  
CVE No.
CVE-2007-1993  
Status
Candidate  
Description
Buffer overflow in the pfs_mountd.rpc RPC daemon in the Portable File System (PFS) in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by sending "a call to procedure 5, followed by a crafted payload to procedure 2."  
Phase
Assigned (20070411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252741 25350 CVE-2007-1993 IDEFENSE:20070412 Hewlett Packard HP-UX Remote pfs_mountd.rpc Buffer Overflow Vulnerability  View
252742 25350 CVE-2007-1993 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=512  View
252743 25350 CVE-2007-1993 HP:HPSBUX02203  View
252744 25350 CVE-2007-1993 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00913684  View
252745 25350 CVE-2007-1993 HP:SSRT071339  View
252746 25350 CVE-2007-1993 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00913684  View
252747 25350 CVE-2007-1993 BID:23401  View
252748 25350 CVE-2007-1993 URL:http://www.securityfocus.com/bid/23401  View
252749 25350 CVE-2007-1993 OVAL:oval:org.mitre.oval:def:5751  View
252750 25350 CVE-2007-1993 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5751  View
252751 25350 CVE-2007-1993 VUPEN:ADV-2007-1343  View
252752 25350 CVE-2007-1993 URL:http://www.vupen.com/english/advisories/2007/1343  View
252753 25350 CVE-2007-1993 SECTRACK:1017893  View
252754 25350 CVE-2007-1993 URL:http://www.securitytracker.com/id?1017893  View
252755 25350 CVE-2007-1993 SECUNIA:24855  View
252756 25350 CVE-2007-1993 URL:http://secunia.com/advisories/24855  View
252757 25350 CVE-2007-1993 XF:hpux-pfs-privilege-escalation(33567)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51756 JVNDB-2007-000419 Quagga の UPDATE メッセージ処理におけるサービス運用妨害 (DoS) の脆弱性 ルーティングソフトウェアスイートである Quagga の /gpd/pgp_attr.c には、UPDATE メッセージ中の MP_REACH_NLRI および MP_UNREACH_NLRI 属性における値の長さを適切に検査しないため、アサーションエラーの発生によりサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-1995 25350 6.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000419.html  View