CVE

Id
28394  
CVE No.
CVE-2007-5037  
Status
Candidate  
Description
Buffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 allows context-dependent attackers to execute arbitrary code via a long filename.  
Phase
Assigned (20070923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295069 28394 CVE-2007-5037 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=443913  View
295070 28394 CVE-2007-5037 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=540277&group_id=171752  View
295071 28394 CVE-2007-5037 DEBIAN:DSA-1440  View
295072 28394 CVE-2007-5037 URL:http://www.debian.org/security/2007/dsa-1440  View
295073 28394 CVE-2007-5037 FEDORA:FEDORA-2007-3074  View
295074 28394 CVE-2007-5037 URL:https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00228.html  View
295075 28394 CVE-2007-5037 BID:25724  View
295076 28394 CVE-2007-5037 URL:http://www.securityfocus.com/bid/25724  View
295077 28394 CVE-2007-5037 OSVDB:40563  View
295078 28394 CVE-2007-5037 URL:http://osvdb.org/40563  View
295079 28394 CVE-2007-5037 SECUNIA:26825  View
295080 28394 CVE-2007-5037 URL:http://secunia.com/advisories/26825  View
295081 28394 CVE-2007-5037 SECUNIA:27616  View
295082 28394 CVE-2007-5037 URL:http://secunia.com/advisories/27616  View
295083 28394 CVE-2007-5037 SECUNIA:28221  View
295084 28394 CVE-2007-5037 URL:http://secunia.com/advisories/28221  View
295085 28394 CVE-2007-5037 XF:inotifytools-inotifytoolssnprintf-bo(36687)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53979 JVNDB-2007-002671 Ghost Security Suite beta におけるサービス運用妨害 (DoS) の脆弱性 Ghost Security Suite beta は、System Service Descriptor Table (SSDT) 関数ハンドラへの特定のパラメータを適切に検証しないため、サービス運用妨害 (クラッシュ) 状態となる、および権限を取得される脆弱性が存在します。 CVE-2007-5039 28394 2.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002671.html  View