CVEvulnerability

CVE-2007-1677

6.6 MEDIUM Published 2007-03-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-03-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.6 MEDIUM — AV:L/AC:M/Au:S/C:C/I:C/A:C

Description

Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0_BETA2, and NetBSD-current before 20070329, allow local users to execute arbitrary code via long parameters to certain functions, as demonstrated by a long sockaddr structure argument to the clnp_route function.

Affected configurations

• navision software navision financials server 3.0 • netbsd netbsd 2.0 • netbsd netbsd 2.0.1 • netbsd netbsd 2.0.2 • netbsd netbsd 2.0.3 • netbsd netbsd 3.0.1 • netbsd netbsd 3.0.2 • netbsd netbsd 3.1 • netbsd netbsd 4.0

References