{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-09-18T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by (1) the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the (2) TClntMsg, (3) TClntOptIAAddress, (4) TClntOptIAPrefix, (5) TOptVendorSpecInfo, and (6) TOptOptionRequest constructors; and the (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, and (9) TSrvIfaceMgr::decodeRelayForw methods."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "dibbler-optionlength-dos(36684)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36684"}, {"name": "20070918 [MU-200709-02] Dibbler Remote Denial of Service Vulnerability", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html"}, {"name": "40568", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/40568"}, {"name": "26876", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/26876"}, {"tags": ["x_refsource_MISC"], "url": "http://klub.com.pl/dhcpv6/"}, {"tags": ["x_refsource_MISC"], "url": "http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt"}, {"name": "25726", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/25726"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2007-5030", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by (1) the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the (2) TClntMsg, (3) TClntOptIAAddress, (4) TClntOptIAPrefix, (5) TOptVendorSpecInfo, and (6) TOptOptionRequest constructors; and the (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, and (9) TSrvIfaceMgr::decodeRelayForw methods."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "dibbler-optionlength-dos(36684)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36684"}, {"name": "20070918 [MU-200709-02] Dibbler Remote Denial of Service Vulnerability", "refsource": "FULLDISC", "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html"}, {"name": "40568", "refsource": "OSVDB", "url": "http://osvdb.org/40568"}, {"name": "26876", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/26876"}, {"name": "http://klub.com.pl/dhcpv6/", "refsource": "MISC", "url": "http://klub.com.pl/dhcpv6/"}, {"name": "http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt", "refsource": "MISC", "url": "http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt"}, {"name": "25726", "refsource": "BID", "url": "http://www.securityfocus.com/bid/25726"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:17:27.802Z"}, "title": "CVE Program Container", "references": [{"name": "dibbler-optionlength-dos(36684)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36684"}, {"name": "20070918 [MU-200709-02] Dibbler Remote Denial of Service Vulnerability", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html"}, {"name": "40568", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/40568"}, {"name": "26876", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/26876"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://klub.com.pl/dhcpv6/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt"}, {"name": "25726", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/25726"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-5030", "datePublished": "2007-09-21T18:00:00", "dateReserved": "2007-09-21T00:00:00", "dateUpdated": "2024-08-07T15:17:27.802Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dibbler:dibbler:0.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "895CD1B1-B4EE-442A-967A-DF5099212BDB", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by (1) the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the (2) TClntMsg, (3) TClntOptIAAddress, (4) TClntOptIAPrefix, (5) TOptVendorSpecInfo, and (6) TOptOptionRequest constructors; and the (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, and (9) TSrvIfaceMgr::decodeRelayForw methods."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de entero en Dibbler 0.6.0 permiten a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de demonio) mediante paquetes conteniendo opciones con grades longitudes, que disparan intentos de alojamiento de memoria excesivos, como se demuestra con (1) el constructor TSrvMsg en SrvMessages/SrvMsg.cpp; los constructores (2) TClntMsg, (3) TClntOptIAAddress, (4) TClntOptIAPrefix, (5) TOptVendorSpecInfo, y (6) TOptOptionRequest; y los m\u00e9todos (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, y (9) TSrvIfaceMgr::decodeRelayForw."}], "id": "CVE-2007-5030", "lastModified": "2024-11-21T00:36:58.827", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-09-21T19:17:00.000", "references": [{"source": "[email protected]", "url": "http://klub.com.pl/dhcpv6/"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html"}, {"source": "[email protected]", "url": "http://osvdb.org/40568"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/26876"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/25726"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36684"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://klub.com.pl/dhcpv6/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/40568"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/26876"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/25726"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36684"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "[email protected]", "type": "Primary"}]}

{}