vulnwire
6.6med

CVE-2007-0080

Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to th…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
6.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 39%
Public exploits
0
none known

Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the server desthost field of an SMB_Handle_Type instance. NOTE: the impact of this issue has been disputed by a reliable third party and the vendor, who states that exploitation is limited "only to local administrators who have write access to the server configuration files." CVE concurs with the dispute

Exploit prediction (EPSS)

0.44% probability of exploitation in the next 30 days, higher than 39% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.6AV:L/AC:M/Au:S/C:C/I:C/A:C

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

  • osvdb.org /32082 · vdb-entry, x_refsource_OSVDB, x_transferred
  • freeradius.org /security.html · x_refsource_MISC, x_transferred
  • attrition.org /pipermail/vim/2007-February/001304.html · mailing-list, x_refsource_VIM, x_transferred
  • securitytracker.com /id?1017463 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/31248 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /archive/1/455678/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /archive/1/455812/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.