CVE

Id
27384  
CVE No.
CVE-2007-4027  
Status
Candidate  
Description
Buffer overflow in cli32 in Areca CLI 1.72.250 and earlier might allow local users to gain privileges via a long argument. NOTE: this program is not setuid by default, but there are some usage scenarios in which an administrator might make it setuid.  
Phase
Assigned (20070726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
281594 27384 CVE-2007-4027 BUGTRAQ:20070722 Buffer overflow in Areca CLI, version <= 1.72.250  View
281595 27384 CVE-2007-4027 URL:http://www.securityfocus.com/archive/1/archive/1/474415/100/0/threaded  View
281596 27384 CVE-2007-4027 MISC:http://www.devtarget.org/areca-advisory-07-2007.txt  View
281597 27384 CVE-2007-4027 OSVDB:38999  View
281598 27384 CVE-2007-4027 URL:http://osvdb.org/38999  View
281599 27384 CVE-2007-4027 SREASON:2928  View
281600 27384 CVE-2007-4027 URL:http://securityreason.com/securityalert/2928  View
281601 27384 CVE-2007-4027 XF:arecacli-cli32-bo(35546)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52041 JVNDB-2007-000704 libvorbis における vorbis_info_clear() 関数および read() 関数におけるメモリ破壊の脆弱性 libvorbis には、マッピングタイプの取り扱いに不備があり、info.c の vorbis_info_clear() 関数で読み込みアクセス違反が発生する脆弱性、および blocksize 値の取り扱いに不備があり、block.c の read() 関数でセグメンテーションフォルトが発生する脆弱性が存在します。 CVE-2007-4029 27384 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000704.html  View