CVE-2007-3791

{"id": "CVE-2007-3791", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-07-15T23:30:00.000", "references": [{"url": "http://osvdb.org/38091", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26021", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26649", "source": "cve@mitre.org"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=522366", "source": "cve@mitre.org"}, {"url": "http://svn.linuxrulz.org/WebSVN/diff.php?repname=Policyd&path=%2Ftrunk%2Fsockets.c&rev=4&sc=0", "source": "cve@mitre.org"}, {"url": "http://svn.linuxrulz.org/WebSVN/log.php?repname=Policyd&path=%2Fbranches%2Fv1.8x%2Fsockets.c&rev=0&sc=0&isdir=0", "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2007/dsa-1361", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/24899", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35394", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/38091", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/26021", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/26649", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=522366", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://svn.linuxrulz.org/WebSVN/diff.php?repname=Policyd&path=%2Ftrunk%2Fsockets.c&rev=4&sc=0", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://svn.linuxrulz.org/WebSVN/log.php?repname=Policyd&path=%2Fbranches%2Fv1.8x%2Fsockets.c&rev=0&sc=0&isdir=0", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.debian.org/security/2007/dsa-1361", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/24899", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35394", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the w_read function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en la funci\u00f3n w_read de\r\nsockets.c en Cami Sardinha y Nigel Kukard policyd versiones anteriores a 1.81 para Postfix, permite a atacantes remotos provocar una denegaci\u00f3n de servicio y posiblemente ejecutar c\u00f3digo de su elecci\u00f3n mediante comandos SMTP largos.\r\nNOTA: algunos de estos detalles se han obtenido de informaci\u00f3n de terceros."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:policyd:policyd:1.70:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A5877A7-5C2F-425D-9BEF-8541F65FB3C0"}, {"criteria": "cpe:2.3:a:policyd:policyd:1.71:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76BCC829-48A4-4143-B393-76084B283FE6"}, {"criteria": "cpe:2.3:a:policyd:policyd:1.72:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D190060A-8F20-4AD8-B6C7-87E54ADDF064"}, {"criteria": "cpe:2.3:a:policyd:policyd:1.73:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43AD5185-0885-43B1-B0DC-C72FF6B187BD"}, {"criteria": "cpe:2.3:a:policyd:policyd:1.74:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF282E97-2E4A-4CA0-92CD-ADE209FAC50A"}, {"criteria": "cpe:2.3:a:policyd:policyd:1.75:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80E038C8-930A-4D3D-925B-749292130DC4"}, {"criteria": "cpe:2.3:a:policyd:policyd:1.76:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AAB4496-A3CC-4BF0-A411-D9D3E379526C"}, {"criteria": "cpe:2.3:a:policyd:policyd:1.77:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D116E3AE-DA8B-4FA7-84A0-400E84979CF0"}, {"criteria": "cpe:2.3:a:policyd:policyd:1.78:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2C21541-ADF5-43D6-ACF5-9F54C790AD47"}, {"criteria": "cpe:2.3:a:policyd:policyd:1.79:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC2B4A5F-DAF2-4FF1-9258-4C0283DA05C9"}, {"criteria": "cpe:2.3:a:policyd:policyd:1.80:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84E8A875-17DF-4AC0-A686-1FFC9FABCC3B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}