CVE-2007-6562 Multiple stack-based buffer overflows in the use of FD_SET in TCPreen before 1.4.4 allow remote attackers to cause a denial of service via multiple concurrent connections, which result in overflows in...
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the use of FD_SET in TCPreen before 1.4.4 allow remote attackers to cause a denial of service via multiple concurrent connections, which result in overflows in the (1) SocketAddress::Connect function in libsolve/sockprot.cpp and (2) monitor_bridge function in src/bridge.cpp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tcpreen | <= 1.4.3 | No fix listed |
| debian/tcpreen(Debian:12) | < 1.4.3-0.3 | 1.4.3-0.3 |
| debian/tcpreen(Debian:13) | < 1.4.3-0.3 | 1.4.3-0.3 |
| debian/tcpreen(Debian:14) | < 1.4.3-0.3 | 1.4.3-0.3 |
References
- anonsvn.remlab.net
- 40317 vdb-entry
- 40318 vdb-entry
- 28217 third-party-advisory vendor-advisory
- 28254 third-party-advisory
- DSA-1443 vendor-advisory
- 27018 patch vdb-entry
- ADV-2007-4318 vdb-entry
- tcpreen-fdset-bo(39241) vdb-entry
- Debian Security Tracker CVE-2007-6562 vendor-advisory
- bugs.debian.org issue-tracking