cvelistv5 - cve-2007-0247

CVE-2007-0247 (GCVE-0-2007-0247)

Vulnerability from cvelistv5 – Published: 2007-01-16 18:00 – Updated: 2024-08-07 12:12

Summary

squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.squid-cache.org/Versions/v2/2.6/squid-…	x_refsource_CONFIRM
	http://www.squid-cache.org/bugs/show_bug.cgi?id=1857	x_refsource_CONFIRM
	http://secunia.com/advisories/23921	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/23946	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/22079	vdb-entryx_refsource_BID
	http://www.vupen.com/english/advisories/2007/0199	vdb-entryx_refsource_VUPEN
	http://www.gentoo.org/security/en/glsa/glsa-20070…	vendor-advisoryx_refsource_GENTOO
	http://secunia.com/advisories/23810	third-party-advisoryx_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.trustix.org/errata/2007/0003/	vendor-advisoryx_refsource_TRUSTIX
	http://www.ubuntu.com/usn/usn-414-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/23837	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/23805	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/23767	third-party-advisoryx_refsource_SECUNIA
	http://osvdb.org/39839	vdb-entryx_refsource_OSVDB
	http://fedoranews.org/cms/node/2442	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/23889	third-party-advisoryx_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:12:17.535Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1857"
          },
          {
            "name": "23921",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23921"
          },
          {
            "name": "23946",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23946"
          },
          {
            "name": "22079",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22079"
          },
          {
            "name": "ADV-2007-0199",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0199"
          },
          {
            "name": "GLSA-200701-22",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml"
          },
          {
            "name": "23810",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23810"
          },
          {
            "name": "SUSE-SA:2007:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_12_squid.html"
          },
          {
            "name": "MDKSA-2007:026",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:026"
          },
          {
            "name": "2007-0003",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0003/"
          },
          {
            "name": "USN-414-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-414-1"
          },
          {
            "name": "23837",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23837"
          },
          {
            "name": "23805",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23805"
          },
          {
            "name": "23767",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23767"
          },
          {
            "name": "39839",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/39839"
          },
          {
            "name": "FEDORA-2007-092",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://fedoranews.org/cms/node/2442"
          },
          {
            "name": "23889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23889"
          },
          {
            "name": "squid-multiple-dos(31523)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31523"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-01-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1857"
        },
        {
          "name": "23921",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23921"
        },
        {
          "name": "23946",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23946"
        },
        {
          "name": "22079",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22079"
        },
        {
          "name": "ADV-2007-0199",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0199"
        },
        {
          "name": "GLSA-200701-22",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml"
        },
        {
          "name": "23810",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23810"
        },
        {
          "name": "SUSE-SA:2007:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_12_squid.html"
        },
        {
          "name": "MDKSA-2007:026",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:026"
        },
        {
          "name": "2007-0003",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0003/"
        },
        {
          "name": "USN-414-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-414-1"
        },
        {
          "name": "23837",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23837"
        },
        {
          "name": "23805",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23805"
        },
        {
          "name": "23767",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23767"
        },
        {
          "name": "39839",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/39839"
        },
        {
          "name": "FEDORA-2007-092",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://fedoranews.org/cms/node/2442"
        },
        {
          "name": "23889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23889"
        },
        {
          "name": "squid-multiple-dos(31523)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31523"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0247",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12",
              "refsource": "CONFIRM",
              "url": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12"
            },
            {
              "name": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1857",
              "refsource": "CONFIRM",
              "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1857"
            },
            {
              "name": "23921",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23921"
            },
            {
              "name": "23946",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23946"
            },
            {
              "name": "22079",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22079"
            },
            {
              "name": "ADV-2007-0199",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0199"
            },
            {
              "name": "GLSA-200701-22",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml"
            },
            {
              "name": "23810",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23810"
            },
            {
              "name": "SUSE-SA:2007:012",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_12_squid.html"
            },
            {
              "name": "MDKSA-2007:026",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:026"
            },
            {
              "name": "2007-0003",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2007/0003/"
            },
            {
              "name": "USN-414-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-414-1"
            },
            {
              "name": "23837",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23837"
            },
            {
              "name": "23805",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23805"
            },
            {
              "name": "23767",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23767"
            },
            {
              "name": "39839",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/39839"
            },
            {
              "name": "FEDORA-2007-092",
              "refsource": "FEDORA",
              "url": "http://fedoranews.org/cms/node/2442"
            },
            {
              "name": "23889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23889"
            },
            {
              "name": "squid-multiple-dos(31523)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31523"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0247",
    "datePublished": "2007-01-16T18:00:00",
    "dateReserved": "2007-01-16T00:00:00",
    "dateUpdated": "2024-08-07T12:12:17.535Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"24D590FB-2759-475E-8136-1B15352605EC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid:squid:2.6.stable2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2988AF48-979A-4CBC-90D9-83B364719E1F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid:squid:2.6.stable3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A212F82C-E64A-456F-BD37-58D6D10CF62A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid:squid:2.6.stable4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B3A370A-815C-49F9-8BDF-C87C615D160A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid:squid:2.6.stable5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"96EC5316-A83B-4EB5-BCF9-C3800D82F1DF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:squid:squid:2.6.stable6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0BD0D706-FDE4-43EB-9769-B2922BBDCDC8\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.\"}, {\"lang\": \"es\", \"value\": \"El archivo squid/src/ftp.c en Squid versiones anteriores a 2.6.STABLE7, permite a los servidores FTP remotos causar una denegaci\\u00f3n de servicio (volcado del n\\u00facleo) por medio de respuestas de enumeraci\\u00f3n de directorio FTP, posiblemente relacionadas con las funciones (1) ftpListingFinish y (2) ftpHtmlifyListEntry.\"}]",
      "id": "CVE-2007-0247",
      "lastModified": "2024-11-21T00:25:20.727",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:P\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2007-01-16T18:28:00.000",
      "references": "[{\"url\": \"http://fedoranews.org/cms/node/2442\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://osvdb.org/39839\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/23767\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23805\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23810\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23837\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23889\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23921\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23946\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2007:026\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.novell.com/linux/security/advisories/2007_12_squid.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/22079\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.squid-cache.org/bugs/show_bug.cgi?id=1857\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.trustix.org/errata/2007/0003/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.ubuntu.com/usn/usn-414-1\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.vupen.com/english/advisories/2007/0199\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/31523\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://fedoranews.org/cms/node/2442\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://osvdb.org/39839\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/23767\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23805\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23810\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23837\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23889\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23921\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23946\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2007:026\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.novell.com/linux/security/advisories/2007_12_squid.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/22079\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.squid-cache.org/bugs/show_bug.cgi?id=1857\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.trustix.org/errata/2007/0003/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.ubuntu.com/usn/usn-414-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.vupen.com/english/advisories/2007/0199\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/31523\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cve@mitre.org",
      "vendorComments": "[{\"organization\": \"Red Hat\", \"comment\": \"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.\\n\\nThis issue did not affect the versions of squid as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\", \"lastModified\": \"2007-07-26T00:00:00\"}]",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-399\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2007-0247\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2007-01-16T18:28:00.000\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.\"},{\"lang\":\"es\",\"value\":\"El archivo squid/src/ftp.c en Squid versiones anteriores a 2.6.STABLE7, permite a los servidores FTP remotos causar una denegaci\u00f3n de servicio (volcado del n\u00facleo) por medio de respuestas de enumeraci\u00f3n de directorio FTP, posiblemente relacionadas con las funciones (1) ftpListingFinish y (2) ftpHtmlifyListEntry.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-399\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24D590FB-2759-475E-8136-1B15352605EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid:squid:2.6.stable2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2988AF48-979A-4CBC-90D9-83B364719E1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid:squid:2.6.stable3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A212F82C-E64A-456F-BD37-58D6D10CF62A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid:squid:2.6.stable4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B3A370A-815C-49F9-8BDF-C87C615D160A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid:squid:2.6.stable5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96EC5316-A83B-4EB5-BCF9-C3800D82F1DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:squid:squid:2.6.stable6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0BD0D706-FDE4-43EB-9769-B2922BBDCDC8\"}]}]}],\"references\":[{\"url\":\"http://fedoranews.org/cms/node/2442\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/39839\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/23767\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23805\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23810\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23837\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23889\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23921\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23946\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2007:026\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2007_12_squid.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/22079\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.squid-cache.org/bugs/show_bug.cgi?id=1857\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.trustix.org/errata/2007/0003/\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/usn-414-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/0199\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/31523\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://fedoranews.org/cms/node/2442\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/39839\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/23767\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23805\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23810\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23837\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23889\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23921\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23946\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2007:026\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2007_12_squid.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/22079\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.squid-cache.org/bugs/show_bug.cgi?id=1857\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.trustix.org/errata/2007/0003/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/usn-414-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/0199\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/31523\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}],\"vendorComments\":[{\"organization\":\"Red Hat\",\"comment\":\"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.\\n\\nThis issue did not affect the versions of squid as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\",\"lastModified\":\"2007-07-26T00:00:00\"}]}}"
  }
}

GSD-2007-0247

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2007-0247

Aliases

CVE-2007-0247

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-0247",
    "description": "squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.",
    "id": "GSD-2007-0247",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-0247.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-0247"
      ],
      "details": "squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.",
      "id": "GSD-2007-0247",
      "modified": "2023-12-13T01:21:35.432789Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-0247",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12",
            "refsource": "CONFIRM",
            "url": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12"
          },
          {
            "name": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1857",
            "refsource": "CONFIRM",
            "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1857"
          },
          {
            "name": "23921",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23921"
          },
          {
            "name": "23946",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23946"
          },
          {
            "name": "22079",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/22079"
          },
          {
            "name": "ADV-2007-0199",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/0199"
          },
          {
            "name": "GLSA-200701-22",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml"
          },
          {
            "name": "23810",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23810"
          },
          {
            "name": "SUSE-SA:2007:012",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2007_12_squid.html"
          },
          {
            "name": "MDKSA-2007:026",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:026"
          },
          {
            "name": "2007-0003",
            "refsource": "TRUSTIX",
            "url": "http://www.trustix.org/errata/2007/0003/"
          },
          {
            "name": "USN-414-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/usn-414-1"
          },
          {
            "name": "23837",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23837"
          },
          {
            "name": "23805",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23805"
          },
          {
            "name": "23767",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23767"
          },
          {
            "name": "39839",
            "refsource": "OSVDB",
            "url": "http://osvdb.org/39839"
          },
          {
            "name": "FEDORA-2007-092",
            "refsource": "FEDORA",
            "url": "http://fedoranews.org/cms/node/2442"
          },
          {
            "name": "23889",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23889"
          },
          {
            "name": "squid-multiple-dos(31523)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31523"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:squid:squid:2.6.stable6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid:squid:2.6.stable5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid:squid:2.6.stable4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid:squid:2.6.stable3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:squid:squid:2.6.stable2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0247"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-399"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12"
            },
            {
              "name": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1857",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1857"
            },
            {
              "name": "23767",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/23767"
            },
            {
              "name": "FEDORA-2007-092",
              "refsource": "FEDORA",
              "tags": [],
              "url": "http://fedoranews.org/cms/node/2442"
            },
            {
              "name": "GLSA-200701-22",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml"
            },
            {
              "name": "SUSE-SA:2007:012",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2007_12_squid.html"
            },
            {
              "name": "2007-0003",
              "refsource": "TRUSTIX",
              "tags": [],
              "url": "http://www.trustix.org/errata/2007/0003/"
            },
            {
              "name": "USN-414-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/usn-414-1"
            },
            {
              "name": "22079",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/22079"
            },
            {
              "name": "23810",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/23810"
            },
            {
              "name": "23805",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/23805"
            },
            {
              "name": "23837",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/23837"
            },
            {
              "name": "23889",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/23889"
            },
            {
              "name": "23921",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/23921"
            },
            {
              "name": "23946",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/23946"
            },
            {
              "name": "MDKSA-2007:026",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:026"
            },
            {
              "name": "39839",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/39839"
            },
            {
              "name": "ADV-2007-0199",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/0199"
            },
            {
              "name": "squid-multiple-dos(31523)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31523"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-07-29T01:30Z",
      "publishedDate": "2007-01-16T18:28Z"
    }
  }
}

CERTA-2007-AVI-035

Vulnerability from certfr_avis - Published: - Updated:

Deux vulnérabilités présentes dans Squid permettent de réaliser un déni de service.

Description

La première vulnérabilité permet à une personne malveillante de réaliser un déni de service en utilisant une requête FTP spécialement conçue.

Une seconde vulnérabilité se trouve dans la fonction aclMatchExternal et permet à un utilisateur malintentionné de réaliser un déni de service par le biais d'un débordement de la file d'attente external_acl.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Squid	Squid	Squid versions 2.6.STABLE6 et antérieures.

References

Title

Publication Time

Tags

Journaux des changements de Squid 2.6.STABLE7	None	vendor-advisory
Bulletin de sécurité Mandriva MDKSA-2007:026 du 23 janvier 2007 :	-	other
Bulletin de sécurité Suse SUSE-SA:2007:012 du 23 janvier 2007 :	-	other
Bulletin de sécurité Ubuntu USN-414-1 du 24 janvier 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions 2.6.STABLE6 et ant\u00e9rieures.",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nLa premi\u00e8re vuln\u00e9rabilit\u00e9 permet \u00e0 une personne malveillante de r\u00e9aliser\nun d\u00e9ni de service en utilisant une requ\u00eate FTP sp\u00e9cialement con\u00e7ue.\n\nUne seconde vuln\u00e9rabilit\u00e9 se trouve dans la fonction aclMatchExternal et\npermet \u00e0 un utilisateur malintentionn\u00e9 de r\u00e9aliser un d\u00e9ni de service\npar le biais d\u0027un d\u00e9bordement de la file d\u0027attente external_acl.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-0248",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0248"
    },
    {
      "name": "CVE-2007-0247",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0247"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2007:026 du 23 janvier    2007 :",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:026"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Suse SUSE-SA:2007:012 du 23 janvier    2007 :",
      "url": "http://www.novell.com/linux/security/advisories/2007_12_squid.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-414-1 du 24 janvier 2007 :",
      "url": "http://www.ubuntu.com/usn/usn-414-1"
    }
  ],
  "reference": "CERTA-2007-AVI-035",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-01-18T00:00:00.000000"
    },
    {
      "description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 de Suse, Mandriva et Ubuntu.",
      "revision_date": "2007-01-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Deux vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans Squid permettent de r\u00e9aliser un d\u00e9ni\nde service.\n",
  "title": "Vuln\u00e9rabilit\u00e9s de Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Journaux des changements de Squid 2.6.STABLE7",
      "url": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html"
    }
  ]
}

CERTA-2007-AVI-035

Vulnerability from certfr_avis - Published: - Updated:

Deux vulnérabilités présentes dans Squid permettent de réaliser un déni de service.

Description

La première vulnérabilité permet à une personne malveillante de réaliser un déni de service en utilisant une requête FTP spécialement conçue.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Squid	Squid	Squid versions 2.6.STABLE6 et antérieures.

References

Title

Publication Time

Tags

Journaux des changements de Squid 2.6.STABLE7	None	vendor-advisory
Bulletin de sécurité Mandriva MDKSA-2007:026 du 23 janvier 2007 :	-	other
Bulletin de sécurité Suse SUSE-SA:2007:012 du 23 janvier 2007 :	-	other
Bulletin de sécurité Ubuntu USN-414-1 du 24 janvier 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Squid versions 2.6.STABLE6 et ant\u00e9rieures.",
      "product": {
        "name": "Squid",
        "vendor": {
          "name": "Squid",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nLa premi\u00e8re vuln\u00e9rabilit\u00e9 permet \u00e0 une personne malveillante de r\u00e9aliser\nun d\u00e9ni de service en utilisant une requ\u00eate FTP sp\u00e9cialement con\u00e7ue.\n\nUne seconde vuln\u00e9rabilit\u00e9 se trouve dans la fonction aclMatchExternal et\npermet \u00e0 un utilisateur malintentionn\u00e9 de r\u00e9aliser un d\u00e9ni de service\npar le biais d\u0027un d\u00e9bordement de la file d\u0027attente external_acl.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-0248",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0248"
    },
    {
      "name": "CVE-2007-0247",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0247"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2007:026 du 23 janvier    2007 :",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:026"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Suse SUSE-SA:2007:012 du 23 janvier    2007 :",
      "url": "http://www.novell.com/linux/security/advisories/2007_12_squid.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-414-1 du 24 janvier 2007 :",
      "url": "http://www.ubuntu.com/usn/usn-414-1"
    }
  ],
  "reference": "CERTA-2007-AVI-035",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-01-18T00:00:00.000000"
    },
    {
      "description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 de Suse, Mandriva et Ubuntu.",
      "revision_date": "2007-01-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Deux vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans Squid permettent de r\u00e9aliser un d\u00e9ni\nde service.\n",
  "title": "Vuln\u00e9rabilit\u00e9s de Squid",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Journaux des changements de Squid 2.6.STABLE7",
      "url": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html"
    }
  ]
}

FKIE_CVE-2007-0247

Vulnerability from fkie_nvd - Published: 2007-01-16 18:28 - Updated: 2025-04-09 00:30

Severity ?

Summary

References

URL	Tags
cve@mitre.org	http://fedoranews.org/cms/node/2442
cve@mitre.org	http://osvdb.org/39839
cve@mitre.org	http://secunia.com/advisories/23767	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/23805	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/23810	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/23837	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/23889	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/23921	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/23946	Vendor Advisory
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDKSA-2007:026
cve@mitre.org	http://www.novell.com/linux/security/advisories/2007_12_squid.html
cve@mitre.org	http://www.securityfocus.com/bid/22079
cve@mitre.org	http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12
cve@mitre.org	http://www.squid-cache.org/bugs/show_bug.cgi?id=1857
cve@mitre.org	http://www.trustix.org/errata/2007/0003/
cve@mitre.org	http://www.ubuntu.com/usn/usn-414-1
cve@mitre.org	http://www.vupen.com/english/advisories/2007/0199	Vendor Advisory
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/31523
af854a3a-2127-422b-91ae-364da2661108	http://fedoranews.org/cms/node/2442
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/39839
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23767	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23805	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23810	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23837	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23889	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23921	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23946	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2007:026
af854a3a-2127-422b-91ae-364da2661108	http://www.novell.com/linux/security/advisories/2007_12_squid.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/22079
af854a3a-2127-422b-91ae-364da2661108	http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12
af854a3a-2127-422b-91ae-364da2661108	http://www.squid-cache.org/bugs/show_bug.cgi?id=1857
af854a3a-2127-422b-91ae-364da2661108	http://www.trustix.org/errata/2007/0003/
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/usn-414-1
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/0199	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/31523

Impacted products

Vendor	Product	Version
squid	squid	2.6.stable1
squid	squid	2.6.stable2
squid	squid	2.6.stable3
squid	squid	2.6.stable4
squid	squid	2.6.stable5
squid	squid	2.6.stable6

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:squid:squid:2.6.stable1:*:*:*:*:*:*:*",
              "matchCriteriaId": "24D590FB-2759-475E-8136-1B15352605EC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid:squid:2.6.stable2:*:*:*:*:*:*:*",
              "matchCriteriaId": "2988AF48-979A-4CBC-90D9-83B364719E1F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid:squid:2.6.stable3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A212F82C-E64A-456F-BD37-58D6D10CF62A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid:squid:2.6.stable4:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B3A370A-815C-49F9-8BDF-C87C615D160A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid:squid:2.6.stable5:*:*:*:*:*:*:*",
              "matchCriteriaId": "96EC5316-A83B-4EB5-BCF9-C3800D82F1DF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:squid:squid:2.6.stable6:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BD0D706-FDE4-43EB-9769-B2922BBDCDC8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions."
    },
    {
      "lang": "es",
      "value": "El archivo squid/src/ftp.c en Squid versiones anteriores a 2.6.STABLE7, permite a los servidores FTP remotos causar una denegaci\u00f3n de servicio (volcado del n\u00facleo) por medio de respuestas de enumeraci\u00f3n de directorio FTP, posiblemente relacionadas con las funciones (1) ftpListingFinish y (2) ftpHtmlifyListEntry."
    }
  ],
  "id": "CVE-2007-0247",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-01-16T18:28:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://fedoranews.org/cms/node/2442"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/39839"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23767"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23805"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23810"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23837"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23889"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23921"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23946"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:026"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2007_12_squid.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/22079"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1857"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.trustix.org/errata/2007/0003/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/usn-414-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/0199"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31523"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://fedoranews.org/cms/node/2442"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/39839"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23767"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23805"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23810"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23837"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23889"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23921"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23946"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:026"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_12_squid.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/22079"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1857"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.trustix.org/errata/2007/0003/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/usn-414-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/0199"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31523"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vendorComments": [
    {
      "comment": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.\n\nThis issue did not affect the versions of squid as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.",
      "lastModified": "2007-07-26T00:00:00",
      "organization": "Red Hat"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-QJVG-797H-7J24

Vulnerability from github – Published: 2022-05-01 17:42 – Updated: 2025-04-09 03:36

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-0247"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-01-16T18:28:00Z",
    "severity": "MODERATE"
  },
  "details": "squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.",
  "id": "GHSA-qjvg-797h-7j24",
  "modified": "2025-04-09T03:36:04Z",
  "published": "2022-05-01T17:42:38Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0247"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31523"
    },
    {
      "type": "WEB",
      "url": "http://fedoranews.org/cms/node/2442"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/39839"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23767"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23805"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23810"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23837"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23889"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23921"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23946"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:026"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2007_12_squid.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/22079"
    },
    {
      "type": "WEB",
      "url": "http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12"
    },
    {
      "type": "WEB",
      "url": "http://www.squid-cache.org/bugs/show_bug.cgi?id=1857"
    },
    {
      "type": "WEB",
      "url": "http://www.trustix.org/errata/2007/0003"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-414-1"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/0199"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2007-0247 (GCVE-0-2007-0247)

GSD-2007-0247

CERTA-2007-AVI-035

Description

Solution

CERTA-2007-AVI-035

Description

Solution

FKIE_CVE-2007-0247

GHSA-QJVG-797H-7J24

Tags

Sightings

Nomenclature