CVE

Id
26456  
CVE No.
CVE-2007-3099  
Status
Candidate  
Description
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client"s UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).  
Phase
Assigned (20070607)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
268229 26456 CVE-2007-3099 CONFIRM:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243719  View
268230 26456 CVE-2007-3099 CONFIRM:http://svn.berlios.de/viewcvs/open-iscsi?rev=857&view=rev  View
268231 26456 CVE-2007-3099 CONFIRM:http://support.novell.com/techcenter/psdb/187174044e1dbe78726bcf840f7530ed.html  View
268232 26456 CVE-2007-3099 DEBIAN:DSA-1314  View
268233 26456 CVE-2007-3099 URL:http://www.debian.org/security/2007/dsa-1314  View
268234 26456 CVE-2007-3099 REDHAT:RHSA-2007:0497  View
268235 26456 CVE-2007-3099 URL:http://www.redhat.com/support/errata/RHSA-2007-0497.html  View
268236 26456 CVE-2007-3099 SUSE:SUSE-SR:2007:017  View
268237 26456 CVE-2007-3099 URL:http://www.novell.com/linux/security/advisories/2007_17_sr.html  View
268238 26456 CVE-2007-3099 BID:24471  View
268239 26456 CVE-2007-3099 URL:http://www.securityfocus.com/bid/24471  View
268240 26456 CVE-2007-3099 OSVDB:37269  View
268241 26456 CVE-2007-3099 URL:http://osvdb.org/37269  View
268242 26456 CVE-2007-3099 OVAL:oval:org.mitre.oval:def:11595  View
268243 26456 CVE-2007-3099 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11595  View
268244 26456 CVE-2007-3099 SECTRACK:1018246  View
268245 26456 CVE-2007-3099 URL:http://www.securitytracker.com/id?1018246  View
268246 26456 CVE-2007-3099 SECUNIA:25679  View
268247 26456 CVE-2007-3099 URL:http://secunia.com/advisories/25679  View
268248 26456 CVE-2007-3099 SECUNIA:25749  View
268249 26456 CVE-2007-3099 URL:http://secunia.com/advisories/25749  View
268250 26456 CVE-2007-3099 SECUNIA:26438  View
268251 26456 CVE-2007-3099 URL:http://secunia.com/advisories/26438  View
268252 26456 CVE-2007-3099 SECUNIA:26543  View
268253 26456 CVE-2007-3099 URL:http://secunia.com/advisories/26543  View
268254 26456 CVE-2007-3099 XF:openiscsi-mgmtipc-dos(34944)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53466 JVNDB-2007-002158 Apache MyFaces Tomahawk の 特定の JSF アプリケーションにおけるクロスサイトスクリプティングの脆弱性 Apache MyFaces Tomahawk の 特定の JSF アプリケーションには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3101 26456 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002158.html  View