NVD

Id
56742  
Name
CVE-2007-4622  
Description
Integer underflow in the dns_name_fromtext function in (1) libdns_nonsecure.a and (2) libdns_secure.a in IBM AIX 5.2 allows local users to gain privileges via a crafted "-y" (TSIG key) command line argument to dig.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-11-05  
Modified Date
2011-03-07  
Seq
2007-4622  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
289249 56742 CVE-2007-4622 ftp://aix.software.ibm.com/aix/efixes/security/dig_ifix.tar  View
289250 56742 CVE-2007-4622 20071030 IBM AIX dig dns_name_fromtext Integer Underflow Vulnerability  View
289251 56742 CVE-2007-4622 1018871  View
289252 56742 CVE-2007-4622 IZ05017  View
289253 56742 CVE-2007-4622 26262  View
289254 56742 CVE-2007-4622 ADV-2007-3669  View
289255 56742 CVE-2007-4622 aix-dig-dnsnamefromtext-integer-underflow(38169)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52227 JVNDB-2007-000917 IBM AIX の dig コマンドにおける整数オーバーフローの脆弱性 IBM AIX には、dig コマンドにおいて TSIG 鍵の取り扱いに不備があり、libdns_nonsecure.a および libdns_secure.a の dns_name_fromtext() 関数において、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-4622 27977 CVE-2007-4622 56742 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000917.html 2007-09-18 2007-11-09 View