CVE

Id
28778  
CVE No.
CVE-2007-5421  
Status
Candidate  
Description
** REJECT ** Multiple stack-based buffer overflows in Cisco IOS 12.x and IOS XR allow attackers to execute arbitrary code, as demonstrated via the "Bind Shell", "Reverse Shell", and "Two byte rootshell (Tiny Shell)" attacks. NOTE: the vendor and researcher agree that this issue does not cross privilege boundaries, saying they do not "represent a vulnerability." The disclosure was intended to demonstrate techniques for exploitation, which is not covered by CVE.  
Phase
Assigned (20071012)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
301160 28778 CVE-2007-5421 BUGTRAQ:20071010 Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques  View
301161 28778 CVE-2007-5421 URL:http://www.securityfocus.com/archive/1/archive/1/481974/100/0/threaded  View
301162 28778 CVE-2007-5421 BUGTRAQ:20071011 Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques  View
301163 28778 CVE-2007-5421 URL:http://www.securityfocus.com/archive/1/archive/1/482019/100/0/threaded  View
301164 28778 CVE-2007-5421 BUGTRAQ:20071010 RE: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques  View
301165 28778 CVE-2007-5421 URL:http://www.securityfocus.com/archive/1/archive/1/482075/100/100/threaded  View
301166 28778 CVE-2007-5421 BUGTRAQ:20071016 RE: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques  View
301167 28778 CVE-2007-5421 URL:http://www.securityfocus.com/archive/1/archive/1/482364/100/0/threaded  View
301168 28778 CVE-2007-5421 MISC:http://www.irmplc.com/index.php/153-Embedded-Systems-Security  View
301169 28778 CVE-2007-5421 MISC:http://www.irmplc.com/index.php/156-IRM-Demonstrates-Multiple-Cisco-IOS-Exploitation-Techniques  View
301170 28778 CVE-2007-5421 BID:25994  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57520 JVNDB-2007-006212 TikiWiki の tiki-graph_formula.php における任意のコードを実行される脆弱性 TikiWiki の tiki-graph_formula.php には、任意のコードを実行される脆弱性が存在します。 CVE-2007-5423 28778 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006212.html  View