Vulnerability-Lookup

CVE-2007-0475 (GCVE-0-2007-0475)

Vulnerability from cvelistv5 – Published: 2007-02-03 23:00 – Updated: 2024-08-07 12:19

Summary

Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.

Severity

No CVSS data available.

CWE

Assigner

canonical CNA under the mitre root

CNA scorecard B 82/100 over 60 records in the last 180 days details

References

14 references

URL	Tags
http://secunia.com/advisories/23984	third-party-advisoryx_refsource_SECUNIA
https://lists.berlios.de/pipermail/smb4k-announce…	mailing-listx_refsource_MLIST
http://lists.suse.com/archive/suse-security-annou…	vendor-advisoryx_refsource_SUSE
http://developer.berlios.de/bugs/?func=detailbug&…	x_refsource_CONFIRM
http://developer.berlios.de/project/shownotes.php…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/22299	vdb-entryx_refsource_BID
http://secunia.com/advisories/24111	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24469	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/0393	vdb-entryx_refsource_VUPEN
http://www.gentoo.org/security/en/glsa/glsa-20070…	vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/23937	third-party-advisoryx_refsource_SECUNIA
http://developer.berlios.de/project/shownotes.php…	x_refsource_CONFIRM
http://developer.berlios.de/project/shownotes.php…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA

Date Public

2006-12-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:19:30.257Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "23984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23984"
          },
          {
            "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
          },
          {
            "name": "SUSE-SR:2007:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
          },
          {
            "name": "22299",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22299"
          },
          {
            "name": "24111",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24111"
          },
          {
            "name": "24469",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24469"
          },
          {
            "name": "ADV-2007-0393",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0393"
          },
          {
            "name": "GLSA-200703-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
          },
          {
            "name": "23937",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23937"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
          },
          {
            "name": "MDKSA-2007:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-12-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-02-09T10:00:00.000Z",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "name": "23984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23984"
        },
        {
          "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
        },
        {
          "name": "SUSE-SR:2007:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
        },
        {
          "name": "22299",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22299"
        },
        {
          "name": "24111",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24111"
        },
        {
          "name": "24469",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24469"
        },
        {
          "name": "ADV-2007-0393",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0393"
        },
        {
          "name": "GLSA-200703-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
        },
        {
          "name": "23937",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23937"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
        },
        {
          "name": "MDKSA-2007:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@ubuntu.com",
          "ID": "CVE-2007-0475",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "23984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23984"
            },
            {
              "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
              "refsource": "MLIST",
              "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
            },
            {
              "name": "SUSE-SR:2007:002",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
            },
            {
              "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769",
              "refsource": "CONFIRM",
              "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
              "refsource": "CONFIRM",
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
            },
            {
              "name": "22299",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22299"
            },
            {
              "name": "24111",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24111"
            },
            {
              "name": "24469",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24469"
            },
            {
              "name": "ADV-2007-0393",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0393"
            },
            {
              "name": "GLSA-200703-09",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
            },
            {
              "name": "23937",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23937"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
              "refsource": "CONFIRM",
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
              "refsource": "CONFIRM",
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
            },
            {
              "name": "MDKSA-2007:042",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2007-0475",
    "datePublished": "2007-02-03T23:00:00.000Z",
    "dateReserved": "2007-01-24T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:19:30.257Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-0475",
      "date": "2026-11-05",
      "epss": "0.00413",
      "percentile": "0.35764"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:smb4k:smb4k:0.4:*:*:*:*:*:*:*",
                  "matchCriteriaId": "ADAA1F65-4E7C-4D07-84C5-E104D6B680A2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:smb4k:smb4k:0.5:*:*:*:*:*:*:*",
                  "matchCriteriaId": "117FD513-0BA4-4B76-B865-7DCD2D8C3CC0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:smb4k:smb4k:0.6:*:*:*:*:*:*:*",
                  "matchCriteriaId": "CDC98527-69EE-425C-B563-320F5A731FB8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:smb4k:smb4k:0.7:*:*:*:*:*:*:*",
                  "matchCriteriaId": "28CDB015-89C9-4086-B29F-444C115C050E",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration."
        },
        {
          "lang": "es",
          "value": "M\u00faltiples desbordamientos de b\u00fafer basado en pila en utilities/smb4k_*.cpp en Smb4K anterior a 0.8.0 permite a un usuario local , cuando se presenta sobre listas Smb4K sudoers, ganar privilegios a trav\u00e9s de vectores no especificados relacionada con la variable args y otras variables no especificadas, en conjunci\u00f3n con la configuraci\u00f3n sudo."
        }
      ],
      "id": "CVE-2007-0475",
      "lastModified": "2024-11-21T00:25:57.460",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "LOCAL",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 4.4,
              "confidentialityImpact": "PARTIAL",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 3.4,
            "impactScore": 6.4,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": true,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2007-02-03T23:28:00.000",
      "references": [
        {
          "source": "security@ubuntu.com",
          "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
        },
        {
          "source": "security@ubuntu.com",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/23937"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://secunia.com/advisories/23984"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://secunia.com/advisories/24111"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://secunia.com/advisories/24469"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://www.securityfocus.com/bid/22299"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://www.vupen.com/english/advisories/2007/0393"
        },
        {
          "source": "security@ubuntu.com",
          "tags": [
            "Patch"
          ],
          "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/23937"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/23984"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/24111"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/24469"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/22299"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2007/0393"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch"
          ],
          "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
        }
      ],
      "sourceIdentifier": "security@ubuntu.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "NVD-CWE-Other"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:smb4k:smb4k:0.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ADAA1F65-4E7C-4D07-84C5-E104D6B680A2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:smb4k:smb4k:0.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "117FD513-0BA4-4B76-B865-7DCD2D8C3CC0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:smb4k:smb4k:0.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CDC98527-69EE-425C-B563-320F5A731FB8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:smb4k:smb4k:0.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "28CDB015-89C9-4086-B29F-444C115C050E",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration."
          },
          {
            "lang": "es",
            "value": "M\u00faltiples desbordamientos de b\u00fafer basado en pila en utilities/smb4k_*.cpp en Smb4K anterior a 0.8.0 permite a un usuario local , cuando se presenta sobre listas Smb4K sudoers, ganar privilegios a trav\u00e9s de vectores no especificados relacionada con la variable args y otras variables no especificadas, en conjunci\u00f3n con la configuraci\u00f3n sudo."
          }
        ],
        "id": "CVE-2007-0475",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 4.4,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 3.4,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": true,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2007-02-03T23:28:00.000",
        "references": [
          {
            "source": "security@ubuntu.com",
            "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
          },
          {
            "source": "security@ubuntu.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/23937"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://secunia.com/advisories/23984"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://secunia.com/advisories/24111"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://secunia.com/advisories/24469"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://www.securityfocus.com/bid/22299"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://www.vupen.com/english/advisories/2007/0393"
          },
          {
            "source": "security@ubuntu.com",
            "tags": [
              "Patch"
            ],
            "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/23937"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/23984"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24111"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24469"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/22299"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2007/0393"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
          }
        ],
        "sourceIdentifier": "security@ubuntu.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2023-12-09T03:41:22Z",
      "cve": "CVE-2007-0475",
      "id": "CVE-2007-0475",
      "initial_release_date": "2023-02-15T06:13:12Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2007-0475",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2007-0475.json",
      "version": "4"
    }
  }
}

BDU:2015-09552 (CVE-2007-0472)

Vulnerability from fstec – Published: 2015-04-28 – Updated: 2021-03-23 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Gentoo Linux, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета smb4k (до версии 0.6.10a) операционной системы Gentoo Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена локально

Severity

4.4 (Medium) CVSS 2.0


                      
                        AV:L/AC:M/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

Aliases

CVE-2007-0472, CVE-2007-0473, CVE-2007-0474, CVE-2007-0475, GLSA-200703-09

References

1 reference

URL
http://security.gentoo.org/glsa/glsa-200703-09.xml

Impacted products

1 product from 1 vendor

Vendors

Gentoo Foundation Inc.

Products

Gentoo Linux

Versions

до 2007.0 (Gentoo Linux)

Product types

Operating system

Mitigations

Обновление пакета smb4k до версии 0.6.10a или выше

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Gentoo Foundation Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 2007.0 (Gentoo Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u0430 smb4k \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.6.10a \u0438\u043b\u0438 \u0432\u044b\u0448\u0435",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "09.03.2007",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-09552",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2007-0472, CVE-2007-0473, CVE-2007-0474, CVE-2007-0475, GLSA-200703-09",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Gentoo Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gentoo Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 smb4k (\u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.6.10a) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gentoo Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://security.gentoo.org/glsa/glsa-200703-09.xml",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,4)"
}

FKIE_CVE-2007-0475

Vulnerability from fkie_nvd - Published: 2007-02-03 23:28 - Updated: 2026-06-16 22:35

Severity

Summary

References

URL	Tags
security@ubuntu.com	http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769
security@ubuntu.com	http://developer.berlios.de/project/shownotes.php?release_id=11706
security@ubuntu.com	http://developer.berlios.de/project/shownotes.php?release_id=11902
security@ubuntu.com	http://developer.berlios.de/project/shownotes.php?release_id=9777
security@ubuntu.com	http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html
security@ubuntu.com	http://secunia.com/advisories/23937	Patch, Vendor Advisory
security@ubuntu.com	http://secunia.com/advisories/23984
security@ubuntu.com	http://secunia.com/advisories/24111
security@ubuntu.com	http://secunia.com/advisories/24469
security@ubuntu.com	http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml
security@ubuntu.com	http://www.mandriva.com/security/advisories?name=MDKSA-2007:042
security@ubuntu.com	http://www.securityfocus.com/bid/22299
security@ubuntu.com	http://www.vupen.com/english/advisories/2007/0393
security@ubuntu.com	https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html	Patch
af854a3a-2127-422b-91ae-364da2661108	http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769
af854a3a-2127-422b-91ae-364da2661108	http://developer.berlios.de/project/shownotes.php?release_id=11706
af854a3a-2127-422b-91ae-364da2661108	http://developer.berlios.de/project/shownotes.php?release_id=11902
af854a3a-2127-422b-91ae-364da2661108	http://developer.berlios.de/project/shownotes.php?release_id=9777
af854a3a-2127-422b-91ae-364da2661108	http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23937	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23984
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24111
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24469
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2007:042
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/22299
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/0393
af854a3a-2127-422b-91ae-364da2661108	https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html	Patch

Impacted products

Vendor	Product	Version
smb4k	smb4k	0.4
smb4k	smb4k	0.5
smb4k	smb4k	0.6
smb4k	smb4k	0.7

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "security@ubuntu.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:smb4k:smb4k:0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "ADAA1F65-4E7C-4D07-84C5-E104D6B680A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:smb4k:smb4k:0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "117FD513-0BA4-4B76-B865-7DCD2D8C3CC0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:smb4k:smb4k:0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDC98527-69EE-425C-B563-320F5A731FB8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:smb4k:smb4k:0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "28CDB015-89C9-4086-B29F-444C115C050E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples desbordamientos de b\u00fafer basado en pila en utilities/smb4k_*.cpp en Smb4K anterior a 0.8.0 permite a un usuario local , cuando se presenta sobre listas Smb4K sudoers, ganar privilegios a trav\u00e9s de vectores no especificados relacionada con la variable args y otras variables no especificadas, en conjunci\u00f3n con la configuraci\u00f3n sudo."
    }
  ],
  "id": "CVE-2007-0475",
  "lastModified": "2026-06-16T22:35:38.987",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.4,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.4,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-02-03T23:28:00.000",
  "references": [
    {
      "source": "security@ubuntu.com",
      "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23937"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://secunia.com/advisories/23984"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://secunia.com/advisories/24111"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://secunia.com/advisories/24469"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://www.securityfocus.com/bid/22299"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://www.vupen.com/english/advisories/2007/0393"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Patch"
      ],
      "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23937"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23984"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24111"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24469"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/22299"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/0393"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
    }
  ],
  "sourceIdentifier": "security@ubuntu.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-37JJ-MF3J-H43W

Vulnerability from github – Published: 2022-05-01 17:44 – Updated: 2022-05-01 17:44

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-0475"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-02-03T23:28:00Z",
    "severity": "MODERATE"
  },
  "details": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.",
  "id": "GHSA-37jj-mf3j-h43w",
  "modified": "2022-05-01T17:44:36Z",
  "published": "2022-05-01T17:44:36Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0475"
    },
    {
      "type": "WEB",
      "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
    },
    {
      "type": "WEB",
      "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
    },
    {
      "type": "WEB",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
    },
    {
      "type": "WEB",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
    },
    {
      "type": "WEB",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
    },
    {
      "type": "WEB",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23937"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23984"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24111"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24469"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/22299"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/0393"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2007-0475

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2007-0475

Aliases

CVE-2007-0475

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-0475",
    "description": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.",
    "id": "GSD-2007-0475",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-0475.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-0475"
      ],
      "details": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.",
      "id": "GSD-2007-0475",
      "modified": "2023-12-13T01:21:35.989985Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@ubuntu.com",
        "ID": "CVE-2007-0475",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "23984",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23984"
          },
          {
            "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
            "refsource": "MLIST",
            "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
          },
          {
            "name": "SUSE-SR:2007:002",
            "refsource": "SUSE",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
          },
          {
            "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769",
            "refsource": "CONFIRM",
            "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
          },
          {
            "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
            "refsource": "CONFIRM",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
          },
          {
            "name": "22299",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/22299"
          },
          {
            "name": "24111",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24111"
          },
          {
            "name": "24469",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24469"
          },
          {
            "name": "ADV-2007-0393",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/0393"
          },
          {
            "name": "GLSA-200703-09",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
          },
          {
            "name": "23937",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23937"
          },
          {
            "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
            "refsource": "CONFIRM",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
          },
          {
            "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
            "refsource": "CONFIRM",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
          },
          {
            "name": "MDKSA-2007:042",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:smb4k:smb4k:0.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:smb4k:smb4k:0.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:smb4k:smb4k:0.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:smb4k:smb4k:0.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@ubuntu.com",
          "ID": "CVE-2007-0475"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
              "refsource": "MLIST",
              "tags": [
                "Patch"
              ],
              "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
            },
            {
              "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
            },
            {
              "name": "23937",
              "refsource": "SECUNIA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/23937"
            },
            {
              "name": "GLSA-200703-09",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
            },
            {
              "name": "SUSE-SR:2007:002",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
            },
            {
              "name": "22299",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/22299"
            },
            {
              "name": "23984",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23984"
            },
            {
              "name": "24111",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24111"
            },
            {
              "name": "24469",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24469"
            },
            {
              "name": "MDKSA-2007:042",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
            },
            {
              "name": "ADV-2007-0393",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/0393"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.4,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 3.4,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2011-03-08T02:49Z",
      "publishedDate": "2007-02-03T23:28Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2007-0475 (GCVE-0-2007-0475)

BDU:2015-09552 (CVE-2007-0472)

FKIE_CVE-2007-0475

GHSA-37JJ-MF3J-H43W

GSD-2007-0475

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour