CVE-2007-4476
HIGH severity · CVSS 7.5 · Memory corruption
7.5CVSS HIGH
Summary
Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)15%
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Official patch: http://secunia.com/advisories/26674 ↗
Additional information
- NVD record
- http://secunia.com/advisories/26674Patch
- http://bugs.gentoo.org/show_bug.cgi?id=196978Advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691Advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705Advisory
- http://secunia.com/advisories/26987Advisory
- http://secunia.com/advisories/27331Advisory
- http://secunia.com/advisories/27453Advisory
- http://secunia.com/advisories/27514Advisory