Lucene search

MitreCVE-2007-2989

HistoryJun 01, 2007 - 10:30 a.m.

CVE-2007-2989

2007-06-0110:30:00

mitre

web.nvd.nist.gov

sun solaris 9

libike library

logic error

denial of service

remote attackers

cve-2007-2989

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.4

Confidence

Low

EPSS

0.079

Percentile

94.3%

JSON

The libike library in Sun Solaris 9 before 20070529 contains a logic error related to a certain pointer, which allows remote attackers to cause a denial of service (in.iked daemon crash) by sending certain UDP packets with a source port different from 500. NOTE: this issue might overlap CVE-2006-2298.

Affected configurations

Nvd

Node

sunsolarisMatch9.0sparc

sunsolarisMatch9.0x86

VendorProductVersionCPE
sunsolaris9.0cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*
sunsolaris9.0cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*

Vendor	Product	Version	CPE
sun	solaris	9.0	cpe:2.3:o:sun:solaris:9.0::sparc:::::
sun	solaris	9.0	cpe:2.3:o:sun:solaris:9.0::x86:::::

References

osvdb.org/36584

secunia.com/advisories/25465

secunia.com/advisories/25661

sunsolve.sun.com/search/document.do?assetkey=1-26-102745-1

support.avaya.com/elmodocs2/security/ASA-2007-227.htm

www.securityfocus.com/bid/24209

www.securitytracker.com/id?1018134

www.vupen.com/english/advisories/2007/1982

www.vupen.com/english/advisories/2007/2188

exchange.xforce.ibmcloud.com/vulnerabilities/34576

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1966

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.4

Confidence

Low

EPSS

0.079

Percentile

94.3%

JSON

Related for CVE-2007-2989