Lucene search

MitreCVE-2007-4221

HistoryAug 29, 2007 - 1:17 a.m.

CVE-2007-4221

2007-08-2901:17:00

CWE-119

CWE-20

mitre

web.nvd.nist.gov

cve-2007-4221

buffer overflow

denial of service

remote code execution

timbuktu pro

windows

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.238

Percentile

96.6%

JSON

Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via (1) a long user name and (2) certain malformed requests; and (3) allow remote Timbuktu servers to have an unknown impact via a malformed HELLO response, related to the Scanner component and possibly related to a malformed computer name.

Affected configurations

Nvd

Node

motorolatimbuktuMatch8.6.3.1367pro

VendorProductVersionCPE
motorolatimbuktu8.6.3.1367cpe:2.3:a:motorola:timbuktu:8.6.3.1367:*:pro:*:*:*:*:*

Vendor	Product	Version	CPE
motorola	timbuktu	8.6.3.1367	cpe:2.3:a:motorola:timbuktu:8.6.3.1367::pro:::::

References

ftp://ftp-xo.netopia.com/evaluation/docs/timbuktu/win/865/relnotes/TB2Win865Evalrn.pdf

labs.idefense.com/intelligence/vulnerabilities/display.php?id=590

secunia.com/advisories/26588

www.securityfocus.com/bid/25454

www.securitytracker.com/id?1018614

www.vupen.com/english/advisories/2007/2990

exchange.xforce.ibmcloud.com/vulnerabilities/36280

exchange.xforce.ibmcloud.com/vulnerabilities/36281

exchange.xforce.ibmcloud.com/vulnerabilities/36282

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.238

Percentile

96.6%

JSON

Related for CVE-2007-4221