CVE

Id
31745  
CVE No.
CVE-2008-1628  
Status
Candidate  
Description
Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20080402)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
341317 31745 CVE-2008-1628 MLIST:[linux-audit] 20080330 audit 1.7 released  View
341318 31745 CVE-2008-1628 URL:https://www.redhat.com/archives/linux-audit/2008-March/msg00138.html  View
341319 31745 CVE-2008-1628 CONFIRM:http://people.redhat.com/sgrubb/audit/ChangeLog  View
341320 31745 CVE-2008-1628 FEDORA:FEDORA-2008-3012  View
341321 31745 CVE-2008-1628 URL:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00200.html  View
341322 31745 CVE-2008-1628 GENTOO:GLSA-200807-14  View
341323 31745 CVE-2008-1628 URL:http://security.gentoo.org/glsa/glsa-200807-14.xml  View
341324 31745 CVE-2008-1628 MANDRIVA:MDVSA-2008:083  View
341325 31745 CVE-2008-1628 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:083  View
341326 31745 CVE-2008-1628 SUSE:SUSE-SR:2008:010  View
341327 31745 CVE-2008-1628 URL:http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html  View
341328 31745 CVE-2008-1628 BID:28524  View
341329 31745 CVE-2008-1628 URL:http://www.securityfocus.com/bid/28524  View
341330 31745 CVE-2008-1628 VUPEN:ADV-2008-1052  View
341331 31745 CVE-2008-1628 URL:http://www.vupen.com/english/advisories/2008/1052/references  View
341332 31745 CVE-2008-1628 SECTRACK:1019824  View
341333 31745 CVE-2008-1628 URL:http://www.securitytracker.com/id?1019824  View
341334 31745 CVE-2008-1628 SECUNIA:29617  View
341335 31745 CVE-2008-1628 URL:http://secunia.com/advisories/29617  View
341336 31745 CVE-2008-1628 SECUNIA:29754  View
341337 31745 CVE-2008-1628 URL:http://secunia.com/advisories/29754  View
341338 31745 CVE-2008-1628 SECUNIA:29957  View
341339 31745 CVE-2008-1628 URL:http://secunia.com/advisories/29957  View
341340 31745 CVE-2008-1628 SECUNIA:31316  View
341341 31745 CVE-2008-1628 URL:http://secunia.com/advisories/31316  View
341342 31745 CVE-2008-1628 XF:linuxaudit-auditlogusercommand-bo(41576)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47604 JVNDB-2008-002914 CuteFlow における SQL インジェクションの脆弱性 CuteFlow には、SQL インジェクションの脆弱性が存在します。 CVE-2008-1632 31745 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002914.html  View