CVEvulnerability
CVE-2007-0475
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-02-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.
Affected configurations
• smb4k smb4k 0.4
• smb4k smb4k 0.5
• smb4k smb4k 0.6
• smb4k smb4k 0.7
References
- http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769 developer.berlios.de
- http://developer.berlios.de/project/shownotes.php?release_id=11706 developer.berlios.de
- http://developer.berlios.de/project/shownotes.php?release_id=11902 developer.berlios.de
- http://developer.berlios.de/project/shownotes.php?release_id=9777 developer.berlios.de
- http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html lists.suse.com
- http://secunia.com/advisories/23937 Patch, Vendor Advisory
- http://secunia.com/advisories/23984 secunia.com
- http://secunia.com/advisories/24111 secunia.com
- http://secunia.com/advisories/24469 secunia.com
- http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:042 www.mandriva.com
- http://www.securityfocus.com/bid/22299 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0393 www.vupen.com
- https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html Patch
- http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769 developer.berlios.de
- http://developer.berlios.de/project/shownotes.php?release_id=11706 developer.berlios.de
- http://developer.berlios.de/project/shownotes.php?release_id=11902 developer.berlios.de
- http://developer.berlios.de/project/shownotes.php?release_id=9777 developer.berlios.de
- http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html lists.suse.com
- http://secunia.com/advisories/23937 Patch, Vendor Advisory
- http://secunia.com/advisories/23984 secunia.com
- http://secunia.com/advisories/24111 secunia.com
- http://secunia.com/advisories/24469 secunia.com
- http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:042 www.mandriva.com
- http://www.securityfocus.com/bid/22299 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0393 www.vupen.com
- https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html Patch