Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-5904
HistoryNov 09, 2007 - 12:00 a.m.

CVE-2007-5904

2007-11-0900:00:00
ubuntu.com
ubuntu.com
8

6.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:H/Au:N/C:C/I:C/A:C

0.032 Low

EPSS

Percentile

91.1%

Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier
allows remote attackers to cause a denial of service (crash) and possibly
execute arbitrary code via long SMB responses that trigger the overflows in
the SendReceive function.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlinux-source-2.6.15<Β 2.6.15-52.67UNKNOWN
ubuntu7.04noarchlinux-source-2.6.20<Β 2.6.20-17.36UNKNOWN
ubuntu7.10noarchlinux-source-2.6.22<Β 2.6.22-15.54UNKNOWN

6.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:H/Au:N/C:C/I:C/A:C

0.032 Low

EPSS

Percentile

91.1%