Lucene search

MitreCVE-2007-5037

HistorySep 24, 2007 - 12:17 a.m.

CVE-2007-5037

2007-09-2400:17:00

CWE-119

mitre

web.nvd.nist.gov

cve-2007-5037

buffer overflow

inotifytools_snprintf function

inotify-tools library

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.02

Percentile

89.1%

JSON

Buffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 allows context-dependent attackers to execute arbitrary code via a long filename.

Affected configurations

Nvd

Node

inotifyinotify-toolsRange≤3.10

VendorProductVersionCPE
inotifyinotify-tools*cpe:2.3:a:inotify:inotify-tools:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
inotify	inotify-tools	*	cpe:2.3:a:inotify:inotify-tools::::::::

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=443913

osvdb.org/40563

secunia.com/advisories/26825

secunia.com/advisories/27616

secunia.com/advisories/28221

sourceforge.net/project/shownotes.php?release_id=540277&group_id=171752

www.debian.org/security/2007/dsa-1440

www.securityfocus.com/bid/25724

exchange.xforce.ibmcloud.com/vulnerabilities/36687

www.redhat.com/archives/fedora-package-announce/2007-November/msg00228.html

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.02

Percentile

89.1%

JSON

Related for CVE-2007-5037