vulnwire
4.4med

CVE-2007-0475

Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers l…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
4.4
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 36%
Public exploits
0
none known

Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.

Exploit prediction (EPSS)

0.41% probability of exploitation in the next 30 days, higher than 36% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.04.4AV:L/AC:M/Au:N/C:P/I:P/A:P

References

  • secunia.com /advisories/23984 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.berlios.de /pipermail/smb4k-announce/2006-December/000037.html · mailing-list, x_refsource_MLIST, x_transferred
  • lists.suse.com /archive/suse-security-announce/2007-Jan/0015.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • developer.berlios.de /bugs/?func=detailbug&bug_id=9631&group_id=769 · x_refsource_CONFIRM, x_transferred
  • developer.berlios.de /project/shownotes.php?release_id=9777 · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/22299 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/24111 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/24469 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2007/0393 · vdb-entry, x_refsource_VUPEN, x_transferred
  • gentoo.org /security/en/glsa/glsa-200703-09.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • secunia.com /advisories/23937 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • developer.berlios.de /project/shownotes.php?release_id=11902 · x_refsource_CONFIRM, x_transferred
  • developer.berlios.de /project/shownotes.php?release_id=11706 · x_refsource_CONFIRM, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2007:042 · vendor-advisory, x_refsource_MANDRIVA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.