NVD

Id
54196  
Name
CVE-2007-2026  
Description
The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported for AMaViS.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-04-13  
Modified Date
2011-03-07  
Seq
2007-2026  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
274813 54196 CVE-2007-2026 http://sourceforge.net/mailarchive/forum.php?thread_name=755AF709E5B77E6EA58479D5%40foxx.lsit.ucsb.edu&forum_name=amavis-user  View
274814 54196 CVE-2007-2026 http://www.amavis.org/security/asa-2007-3.txt  View
274815 54196 CVE-2007-2026 GLSA-200704-13  View
274816 54196 CVE-2007-2026 MDKSA-2007:114  View
274817 54196 CVE-2007-2026 20070524 FLEA-2007-0022-1: file  View
274818 54196 CVE-2007-2026 24146  View
274819 54196 CVE-2007-2026 ADV-2007-2071  View
274820 54196 CVE-2007-2026 https://bugs.gentoo.org/show_bug.cgi?id=174217  View
274821 54196 CVE-2007-2026 https://issues.rpath.com/browse/RPL-1311  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53124 JVNDB-2007-001816 ファイルの GNU 正規表現コードにおけるサービス運用妨害 (DoS) の脆弱性 ファイルの GNU 正規表現コードは、AMaViSで当初報告されたように、OS/2 REXX の正規表現でワイルドカードを使用することで適切に処理されないため、サービス運用妨害 (CPU 消費) 状態となる脆弱性が存在します。 CVE-2007-2026 25381 CVE-2007-2026 54196 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001816.html 2007-04-11 2012-06-26 View