Vulnerability-Lookup

CERTA-2007-AVI-476

Vulnerability from certfr_avis - Published: 2007-11-05 - Updated: 2007-11-05

gFTP est un client FTP utilisant une bibliothèque contenant deux vulnérabilités.

Description

Le logiciel gFTP est un client graphique ftp pour l'interface GNOME. Pour offrir la compatibilité avec le protocole FPS (File service Protocol), il utilise la bibliothèque fpslib qui contient deux vulnérabilités concernant le traitement des noms longs de répertoire. Une personne malveillante peut exécuter du code arbitraire sur la machine d'un utilisateur, lorsque ce dernier accède à un serveur contenant des noms de répertoire spécifiquement formés, à l'aide du client gFTP.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les versions de gFTP utilisant la bibliothèque fpslib antérieure à la version 0.9.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Secunia du 2 novembre 2007	None	vendor-advisory
Bulletin de sécurité Gentoo GLSA-200711-01 du 01 novembre 2007 :	-	other
Alerte de Secunia numéro 26378 du 09 août 2007 :	-	other
Alerte de Secunia numéro 27501 du 02 novembre 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eLes versions de \u003cTT\u003egFTP\u003c/TT\u003e utilisant  la biblioth\u00e8que \u003cTT\u003efpslib\u003c/TT\u003e ant\u00e9rieure \u00e0 la version 0.9.\u003c/p\u003e",
  "content": "## Description\n\nLe logiciel gFTP est un client graphique ftp pour l\u0027interface GNOME.\nPour offrir la compatibilit\u00e9 avec le protocole FPS (File service\nProtocol), il utilise la biblioth\u00e8que fpslib qui contient deux\nvuln\u00e9rabilit\u00e9s concernant le traitement des noms longs de r\u00e9pertoire.\nUne personne malveillante peut ex\u00e9cuter du code arbitraire sur la\nmachine d\u0027un utilisateur, lorsque ce dernier acc\u00e8de \u00e0 un serveur\ncontenant des noms de r\u00e9pertoire sp\u00e9cifiquement form\u00e9s, \u00e0 l\u0027aide du\nclient gFTP.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-3961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3961"
    },
    {
      "name": "CVE-2007-3962",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3962"
    }
  ],
  "initial_release_date": "2007-11-05T00:00:00",
  "last_revision_date": "2007-11-05T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200711-01 du 01 novembre    2007 :",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-01.xml"
    },
    {
      "title": "Alerte de Secunia num\u00e9ro 26378 du 09 ao\u00fbt 2007 :",
      "url": "http://secunia.com/advisories/26378/"
    },
    {
      "title": "Alerte de Secunia num\u00e9ro 27501 du 02 novembre 2007 :",
      "url": "http://secunia.com/advisories/27501/"
    }
  ],
  "reference": "CERTA-2007-AVI-476",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-11-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "gFTP est un client FTP utilisant une biblioth\u00e8que contenant deux\nvuln\u00e9rabilit\u00e9s.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans gFTP",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Secunia du 2 novembre 2007",
      "url": null
    }
  ]
}

CVE-2007-3962 (GCVE-0-2007-3962)

Vulnerability from cvelistv5 – Published: 2007-07-25 17:00 – Updated: 2024-08-07 14:37

Summary

Multiple stack-based buffer overflows in fsplib.c in fsplib before 0.9 might allow remote attackers to execute arbitrary code via (1) a long filename that is not properly handled by the fsp_readdir_native function when MAXNAMLEN is greater than 255, or (2) a long d_name directory (dirent) field in the fsp_readdir function.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.…	x_refsource_MISC
	http://security.gentoo.org/glsa/glsa-200711-01.xml	vendor-advisoryx_refsource_GENTOO
	http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.…	x_refsource_MISC
	http://bugs.gentoo.org/show_bug.cgi?id=188252	x_refsource_CONFIRM
	http://osvdb.org/38569	vdb-entryx_refsource_OSVDB
	http://www.securityfocus.com/bid/25034	vdb-entryx_refsource_BID
	http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeL…	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/26378	third-party-advisoryx_refsource_SECUNIA
	http://osvdb.org/38570	vdb-entryx_refsource_OSVDB
	http://secunia.com/advisories/27501	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/26184	third-party-advisoryx_refsource_SECUNIA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:37:05.897Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.17\u0026r2=1.18"
          },
          {
            "name": "GLSA-200711-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200711-01.xml"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.21\u0026r2=1.22"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=188252"
          },
          {
            "name": "38569",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/38569"
          },
          {
            "name": "25034",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25034"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17\u0026view=markup"
          },
          {
            "name": "MDVSA-2008:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:018"
          },
          {
            "name": "26378",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26378"
          },
          {
            "name": "38570",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/38570"
          },
          {
            "name": "27501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27501"
          },
          {
            "name": "26184",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26184"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple stack-based buffer overflows in fsplib.c in fsplib before 0.9 might allow remote attackers to execute arbitrary code via (1) a long filename that is not properly handled by the fsp_readdir_native function when MAXNAMLEN is greater than 255, or (2) a long d_name directory (dirent) field in the fsp_readdir function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-08-15T09:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.17\u0026r2=1.18"
        },
        {
          "name": "GLSA-200711-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200711-01.xml"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.21\u0026r2=1.22"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=188252"
        },
        {
          "name": "38569",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/38569"
        },
        {
          "name": "25034",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25034"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17\u0026view=markup"
        },
        {
          "name": "MDVSA-2008:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:018"
        },
        {
          "name": "26378",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26378"
        },
        {
          "name": "38570",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/38570"
        },
        {
          "name": "27501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27501"
        },
        {
          "name": "26184",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26184"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3962",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple stack-based buffer overflows in fsplib.c in fsplib before 0.9 might allow remote attackers to execute arbitrary code via (1) a long filename that is not properly handled by the fsp_readdir_native function when MAXNAMLEN is greater than 255, or (2) a long d_name directory (dirent) field in the fsp_readdir function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.17\u0026r2=1.18",
              "refsource": "MISC",
              "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.17\u0026r2=1.18"
            },
            {
              "name": "GLSA-200711-01",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200711-01.xml"
            },
            {
              "name": "http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.21\u0026r2=1.22",
              "refsource": "MISC",
              "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.21\u0026r2=1.22"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=188252",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=188252"
            },
            {
              "name": "38569",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/38569"
            },
            {
              "name": "25034",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25034"
            },
            {
              "name": "http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17\u0026view=markup",
              "refsource": "CONFIRM",
              "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17\u0026view=markup"
            },
            {
              "name": "MDVSA-2008:018",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:018"
            },
            {
              "name": "26378",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26378"
            },
            {
              "name": "38570",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/38570"
            },
            {
              "name": "27501",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27501"
            },
            {
              "name": "26184",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26184"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3962",
    "datePublished": "2007-07-25T17:00:00",
    "dateReserved": "2007-07-25T00:00:00",
    "dateUpdated": "2024-08-07T14:37:05.897Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-3961 (GCVE-0-2007-3961)

Vulnerability from cvelistv5 – Published: 2007-07-25 17:00 – Updated: 2024-08-07 14:37

Summary

Off-by-one error in the fsp_readdir_r function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://security.gentoo.org/glsa/glsa-200711-01.xml	vendor-advisoryx_refsource_GENTOO
	http://bugs.gentoo.org/show_bug.cgi?id=188252	x_refsource_CONFIRM
	http://osvdb.org/38568	vdb-entryx_refsource_OSVDB
	http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.…	x_refsource_MISC
	http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeL…	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/26378	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/27501	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/26184	third-party-advisoryx_refsource_SECUNIA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:37:05.944Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-200711-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200711-01.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=188252"
          },
          {
            "name": "38568",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/38568"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.19\u0026r2=1.20"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17\u0026view=markup"
          },
          {
            "name": "MDVSA-2008:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:018"
          },
          {
            "name": "26378",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26378"
          },
          {
            "name": "27501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27501"
          },
          {
            "name": "26184",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26184"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Off-by-one error in the fsp_readdir_r function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-08-15T09:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-200711-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200711-01.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=188252"
        },
        {
          "name": "38568",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/38568"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.19\u0026r2=1.20"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17\u0026view=markup"
        },
        {
          "name": "MDVSA-2008:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:018"
        },
        {
          "name": "26378",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26378"
        },
        {
          "name": "27501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27501"
        },
        {
          "name": "26184",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26184"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3961",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Off-by-one error in the fsp_readdir_r function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-200711-01",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200711-01.xml"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=188252",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=188252"
            },
            {
              "name": "38568",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/38568"
            },
            {
              "name": "http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.19\u0026r2=1.20",
              "refsource": "MISC",
              "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.19\u0026r2=1.20"
            },
            {
              "name": "http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17\u0026view=markup",
              "refsource": "CONFIRM",
              "url": "http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17\u0026view=markup"
            },
            {
              "name": "MDVSA-2008:018",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:018"
            },
            {
              "name": "26378",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26378"
            },
            {
              "name": "27501",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27501"
            },
            {
              "name": "26184",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26184"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3961",
    "datePublished": "2007-07-25T17:00:00",
    "dateReserved": "2007-07-25T00:00:00",
    "dateUpdated": "2024-08-07T14:37:05.944Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTA-2007-AVI-476

Description

Solution

CVE-2007-3962 (GCVE-0-2007-3962)

CVE-2007-3961 (GCVE-0-2007-3961)

Tags

Sightings

Nomenclature