Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-1217
HistoryMar 02, 2007 - 12:00 a.m.

CVE-2007-1217

2007-03-0200:00:00
ubuntu.com
ubuntu.com
11

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.017

Percentile

87.8%

Buffer overflow in the bufprint function in capiutil.c in libcapi, as used
in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to
cause a denial of service (crash) and possibly gain privileges via a
crafted CAPI packet.

Notes

Author Note
kees This doesn’t appear exploitable unless debugging has been enabled and the other physical end of the ISDN connection is the attacker.

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.017

Percentile

87.8%