CVE

Id
26865  
CVE No.
CVE-2007-3508  
Status
Candidate  
Description
** DISPUTED ** Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution.  
Phase
Assigned (20070702)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
274119 26865 CVE-2007-3508 MISC:http://sources.gentoo.org/viewcvs.py/gentoo/src/patchsets/glibc/2.5/1600_all_glibc-hwcap-mask-secure.patch?rev=1.1&view=markup  View
274120 26865 CVE-2007-3508 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=183844  View
274121 26865 CVE-2007-3508 MLIST:[libc-hacker] [PATCH] Fix LD_HWCAP_MASK handling  View
274122 26865 CVE-2007-3508 URL:http://www.sourceware.org/ml/libc-hacker/2007-07/msg00001.html  View
274123 26865 CVE-2007-3508 GENTOO:GLSA-200707-04  View
274124 26865 CVE-2007-3508 URL:http://security.gentoo.org/glsa/glsa-200707-04.xml  View
274125 26865 CVE-2007-3508 BID:24758  View
274126 26865 CVE-2007-3508 URL:http://www.securityfocus.com/bid/24758  View
274127 26865 CVE-2007-3508 OSVDB:37901  View
274128 26865 CVE-2007-3508 URL:http://osvdb.org/37901  View
274129 26865 CVE-2007-3508 VUPEN:ADV-2007-2418  View
274130 26865 CVE-2007-3508 URL:http://www.vupen.com/english/advisories/2007/2418  View
274131 26865 CVE-2007-3508 SECTRACK:1018334  View
274132 26865 CVE-2007-3508 URL:http://www.securitytracker.com/id?1018334  View
274133 26865 CVE-2007-3508 SECUNIA:25864  View
274134 26865 CVE-2007-3508 URL:http://secunia.com/advisories/25864  View
274135 26865 CVE-2007-3508 XF:glibc-envvars-overflow(35240)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52121 JVNDB-2007-000784 IBM Lotus Domino の IMAP サービスにおけるバッファオーバーフローの脆弱性 IBM Lotus Domino の IMAP サービスには、過度に長いメールボックス名により、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-3510 26865 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000784.html  View