NVD

Id
52389  
Name
CVE-2007-0157  
Description
Array index error in the uri_lookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platforms, allows remote malicious servers to cause a denial of service (crash) via a URI with non-ASCII characters, which triggers a buffer under-read due to a type conversion error that generates a negative index.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-01-09  
Modified Date
2011-03-07  
Seq
2007-0157  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
264631 52389 CVE-2007-0157 http://bugs.debian.org/cgi-bin/bugreport.cgi/neon26_0.26.2-3_to_mdx1.diff?bug=404723;msg=5;att=2  View
264632 52389 CVE-2007-0157 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=404723  View
264633 52389 CVE-2007-0157 [cadaver] 20070123 release 0.22.5  View
264634 52389 CVE-2007-0157 [neon] 20070107 invalid chars cause sigserv in neon  View
264635 52389 CVE-2007-0157 MDKSA-2007:013  View
264636 52389 CVE-2007-0157 SUSE-SR:2007:002  View
264637 52389 CVE-2007-0157 22035  View
264638 52389 CVE-2007-0157 ADV-2007-0172  View
264639 52389 CVE-2007-0157 ADV-2007-0362  View
264640 52389 CVE-2007-0157 http://www.webdav.org/cadaver/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54505 JVNDB-2007-003197 64 ビットプラットフォームの neon 用の URI パーサーにおけるサービス運用妨害 (DoS) の脆弱性 64 ビットプラットフォームの neon 用の URI パーサーの uri_lookup 関数には、配列インデックスエラーにより、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2007-0157 23512 CVE-2007-0157 52389 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003197.html 2007-01-09 2012-09-25 View