Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-5029
HistorySep 21, 2007 - 12:00 a.m.

CVE-2007-5029

2007-09-2100:00:00
ubuntu.com
ubuntu.com
8

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.034 Low

EPSS

Percentile

91.4%

Dibbler 0.6.0 does not verify that certain length parameters are
appropriate for buffer sizes, which allows remote attackers to trigger a
buffer over-read and cause a denial of service (daemon crash), as
demonstrated by incorrect behavior of the TSrvMsg constructor in
SrvMessages/SrvMsg.cpp when (1) reading the option code and option length
and (2) parsing options.

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchdibbler< 0.6.1-1UNKNOWN
ubuntu8.04noarchdibbler< 0.6.1-1UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.034 Low

EPSS

Percentile

91.4%

Related for UB:CVE-2007-5029