CVE-2007-5037 Buffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 allows context-dependent attackers to execute arbitrary code via a long filename.
MediumCVSS 6.8
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 allows context-dependent attackers to execute arbitrary code via a long filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inotify-tools | <= 3.10 | No fix listed |
| debian/inotify-tools(Debian:12) | < 3.11-1 | 3.11-1 |
| debian/inotify-tools(Debian:13) | < 3.11-1 | 3.11-1 |
| debian/inotify-tools(Debian:14) | < 3.11-1 | 3.11-1 |
References
- bugs.debian.org
- 40563 vdb-entry
- 26825 patch third-party-advisory vendor-advisory
- 27616 third-party-advisory
- 28221 third-party-advisory
- sourceforge.net
- DSA-1440 vendor-advisory
- 25724 vdb-entry
- inotifytools-inotifytoolssnprintf-bo(36687) vdb-entry
- FEDORA-2007-3074 vendor-advisory
- Debian Security Tracker CVE-2007-5037 vendor-advisory
- bugs.debian.org issue-tracking