6.6

CVE-2007-1677

Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0_BETA2, and NetBSD-current before 20070329, allow local users to execute arbitrary code via long parameters to certain functions, as demonstrated by a long sockaddr structure argument to the clnp_route function.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
NetbsdNetbsd Version2.0
NetbsdNetbsd Version2.0.1
NetbsdNetbsd Version2.0.2
NetbsdNetbsd Version2.0.3
NetbsdNetbsd Version3.0.1
NetbsdNetbsd Version3.0.2
NetbsdNetbsd Version3.1
NetbsdNetbsd Version3.1 Updaterc1
NetbsdNetbsd Version3.1 Updaterc3
NetbsdNetbsd Version4.0
NetbsdNetbsd Version4.0 Updatebeta
NetbsdNetbsd Version4.0 Updatebeta2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.123
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.6 2.7 10
AV:L/AC:M/Au:S/C:C/I:C/A:C