CVE-2007-0460

critical

Description

Multiple buffer overflows in ulogd for SUSE Linux 9.3 up to 10.1, and possibly other distributions, have unknown impact and attack vectors related to "improper string length calculations."

References

http://www.securityfocus.com/bid/22139

http://www.novell.com/linux/security/advisories/2007_01_sr.html

http://www.mandriva.com/security/advisories?name=MDKSA-2007:028

http://security.gentoo.org/glsa/glsa-200703-17.xml

http://secunia.com/advisories/24524

http://secunia.com/advisories/23863

http://osvdb.org/32939

Details

Source: Mitre, NVD

Published: 2007-01-24

Updated: 2010-09-15

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H