Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-5497
HistoryDec 07, 2007 - 11:46 a.m.

CVE-2007-5497

2007-12-0711:46:00
CWE-189
[email protected]
web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

7.2

Confidence

Low

EPSS

0.142

Percentile

95.7%

JSON

Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.

Affected configurations

NVD
Node
ext2_filesystems_utilitiese2fsprogsRange≤1.40.2
OR
ext2_filesystems_utilitiese2fsprogsMatch1.02
OR
ext2_filesystems_utilitiese2fsprogsMatch1.03
OR
ext2_filesystems_utilitiese2fsprogsMatch1.04
OR
ext2_filesystems_utilitiese2fsprogsMatch1.05
OR
ext2_filesystems_utilitiese2fsprogsMatch1.06
OR
ext2_filesystems_utilitiese2fsprogsMatch1.07
OR
ext2_filesystems_utilitiese2fsprogsMatch1.08
OR
ext2_filesystems_utilitiese2fsprogsMatch1.09
OR
ext2_filesystems_utilitiese2fsprogsMatch1.10
OR
ext2_filesystems_utilitiese2fsprogsMatch1.11
OR
ext2_filesystems_utilitiese2fsprogsMatch1.12
OR
ext2_filesystems_utilitiese2fsprogsMatch1.13
OR
ext2_filesystems_utilitiese2fsprogsMatch1.14
OR
ext2_filesystems_utilitiese2fsprogsMatch1.15
OR
ext2_filesystems_utilitiese2fsprogsMatch1.16
OR
ext2_filesystems_utilitiese2fsprogsMatch1.17
OR
ext2_filesystems_utilitiese2fsprogsMatch1.18
OR
ext2_filesystems_utilitiese2fsprogsMatch1.19
OR
ext2_filesystems_utilitiese2fsprogsMatch1.20
OR
ext2_filesystems_utilitiese2fsprogsMatch1.21
OR
ext2_filesystems_utilitiese2fsprogsMatch1.22
OR
ext2_filesystems_utilitiese2fsprogsMatch1.23
OR
ext2_filesystems_utilitiese2fsprogsMatch1.24
OR
ext2_filesystems_utilitiese2fsprogsMatch1.25
OR
ext2_filesystems_utilitiese2fsprogsMatch1.26
OR
ext2_filesystems_utilitiese2fsprogsMatch1.27
OR
ext2_filesystems_utilitiese2fsprogsMatch1.28
OR
ext2_filesystems_utilitiese2fsprogsMatch1.29
OR
ext2_filesystems_utilitiese2fsprogsMatch1.30
OR
ext2_filesystems_utilitiese2fsprogsMatch1.31
OR
ext2_filesystems_utilitiese2fsprogsMatch1.32
OR
ext2_filesystems_utilitiese2fsprogsMatch1.33
OR
ext2_filesystems_utilitiese2fsprogsMatch1.34
OR
ext2_filesystems_utilitiese2fsprogsMatch1.35
OR
ext2_filesystems_utilitiese2fsprogsMatch1.36
OR
ext2_filesystems_utilitiese2fsprogsMatch1.37
OR
ext2_filesystems_utilitiese2fsprogsMatch1.38
OR
ext2_filesystems_utilitiese2fsprogsMatch1.39
OR
ext2_filesystems_utilitiese2fsprogsMatch1.40
OR
ext2_filesystems_utilitiese2fsprogsMatch1.40.1

References

Related

nessus 17
openvas 31
centos 2
debian 1
redhat 1
oraclelinux 1
debiancve 1
vmware 2
veracode 1
securityvulns 4
fedora 2
gentoo 1
prion 1
cve 1
ubuntu 1
ubuntucve 1
freebsd 1
cvelist 1
nessus
nessus
SuSE9 Security Update : e2fsprogs (YOU Patch Number 12019)
2009-09-24 00:00:00
Mandrake Linux Security Advisory : e2fsprogs (MDKSA-2007:242)
2007-12-11 00:00:00
VMSA-2008-0004 : Low: Updated e2fsprogs service console package
2009-07-27 00:00:00
openvas
openvas
SLES9: Security update for e2fsprogs
2009-10-10 00:00:00
CentOS Update for e2fsprogs CESA-2008:0003 centos4 i386
2009-02-27 00:00:00
CentOS Update for e2fsprogs CESA-2008:0003 centos3 i386
2009-02-27 00:00:00
centos
centos
e2fsprogs security update
2008-01-08 15:52:54
e2fsprogs security update
2008-01-13 02:23:09
debian
debian
[SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution
2007-12-07 13:21:05
redhat
redhat
(RHSA-2008:0003) Moderate: e2fsprogs security update
2008-01-07 00:00:00
oraclelinux
oraclelinux
Moderate: e2fsprogs security update
2008-01-07 00:00:00
debiancve
debiancve
CVE-2007-5497
2007-12-07 11:46:00
vmware
vmware
Updated e2fsprogs service console package
2008-03-03 00:00:00
Updated e2fsprogs service console package
2008-03-03 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:20:56
securityvulns
securityvulns
[SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution
2007-12-09 00:00:00
e2fsprogs utilities multiple security vulnerabilities
2007-12-09 00:00:00
[security bulletin] HPSBMA02554 SSRT100018 rev.2 - HP Insight Control for Linux, Remote Execution of Arbitrary Code, Remote Denial of Service (DoS), Remote Unauthorized Access
2010-07-18 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: e2fsprogs-1.40.2-12.fc8
2008-01-18 23:57:39
[SECURITY] Fedora 7 Update: e2fsprogs-1.40.2-3.fc7
2008-01-19 00:00:25
gentoo
gentoo
E2fsprogs: Multiple buffer overflows
2007-12-18 00:00:00
prion
prion
Integer overflow
2007-12-07 11:46:00
cve
cve
CVE-2007-5497
2007-12-07 11:46:00
ubuntu
ubuntu
e2fsprogs vulnerability
2007-12-08 00:00:00
ubuntucve
ubuntucve
CVE-2007-5497
2007-12-07 00:00:00
freebsd
freebsd
e2fsprogs -- heap buffer overflow
2007-12-07 00:00:00
cvelist
cvelist
CVE-2007-5497
2007-12-07 11:00:00

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

7.2

Confidence

Low

EPSS

0.142

Percentile

95.7%

JSON
Related for NVD:CVE-2007-5497
nessus17openvas31centos2debian1redhat1oraclelinux1debiancve1vmware2veracode1securityvulns4fedora2gentoo1prion1cve1ubuntu1ubuntucve1freebsd1cvelist1