CVE

Id
29047  
CVE No.
CVE-2007-5690  
Status
Candidate  
Description
** DISPUTED ** Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long device name (interface name) in the ifr_name field. NOTE: the vendor disputes this issue, stating that the application requires root access, so privilege boundaries are not crossed.  
Phase
Assigned (20071029)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
304470 29047 CVE-2007-5690 BUGTRAQ:20071020 [ELEYTT] Public Advisory 20-10-2007  View
304471 29047 CVE-2007-5690 URL:http://www.securityfocus.com/archive/1/archive/1/482597/100/0/threaded  View
304472 29047 CVE-2007-5690 BUGTRAQ:20071108 AST-2007-024 - Fallacious security advisory spread on the Internet involving buffer overflow in Zaptel"s sethdlc application  View
304473 29047 CVE-2007-5690 URL:http://www.securityfocus.com/archive/1/archive/1/483481/100/0/threaded  View
304474 29047 CVE-2007-5690 MISC:http://www.eleytt.com/advisories/eleytt_ZAPTEL.pdf  View
304475 29047 CVE-2007-5690 MISC:http://downloads.digium.com/pub/asa/AST-2007-024.html  View
304476 29047 CVE-2007-5690 BID:26160  View
304477 29047 CVE-2007-5690 URL:http://www.securityfocus.com/bid/26160  View
304478 29047 CVE-2007-5690 SECTRACK:1018885  View
304479 29047 CVE-2007-5690 URL:http://www.securitytracker.com/id?1018885  View
304480 29047 CVE-2007-5690 SREASON:3319  View
304481 29047 CVE-2007-5690 URL:http://securityreason.com/securityalert/3319  View
304482 29047 CVE-2007-5690 XF:zaptel-sethdlc-bo(37335)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57573 JVNDB-2007-006265 SiteBar におけるクロスサイトスクリプティングの脆弱性 SiteBar には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-5692 29047 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006265.html  View