Lucene search

MitreCVE-2007-5723

HistoryOct 30, 2007 - 9:46 p.m.

CVE-2007-5723

2007-10-3021:46:00

CWE-119

mitre

web.nvd.nist.gov

cve-2007-5723

buffer overflow

nufw

security vulnerability

nvd

denial of service

base64 encoding

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.2

Confidence

High

EPSS

0.018

Percentile

88.6%

JSON

Heap-based buffer overflow in the samp_send function in nuauth/sasl.c in NuFW before 2.2.7 allows remote attackers to cause a denial of service via unspecified input on which base64 encoding is performed. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

nufwnufwMatch2.2.6

VendorProductVersionCPE
nufwnufw2.2.6cpe:2.3:a:nufw:nufw:2.2.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nufw	nufw	2.2.6	cpe:2.3:a:nufw:nufw:2.2.6:::::::*

References

osvdb.org/39724

secunia.com/advisories/27442

www.nufw.org/+NuFW-2-2-7%2C207+.html

www.securityfocus.com/bid/26251

exchange.xforce.ibmcloud.com/vulnerabilities/38153

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.2

Confidence

High

EPSS

0.018

Percentile

88.6%

JSON

Related for CVE-2007-5723