Unscored severity · published Jan 5, 2007
CVE-2007-0080
Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the server desthost field of an…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the server desthost field of an SMB_Handle_Type instance. NOTE: the impact of this issue has been disputed by a reliable third party and the vendor, who states that exploitation is limited "only to local administrators who have write access to the server configuration files." CVE concurs with the dispute
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freeradius · Freeradius
through 1.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0080
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0080
osvdb.org
http://osvdb.org/32082
securitytracker.com
http://securitytracker.com/id?1017463
www.attrition.org
http://www.attrition.org/pipermail/vim/2007-February/001304.html
www.freeradius.org
http://www.freeradius.org/security.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/455678/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/455812/100/0/threaded
More from Freeradius
9.8
CVE-2019-11235
FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve…
9.8
CVE-2019-11234
FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497
9.8
CVE-2017-10984
An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or…
9.8
CVE-2017-10979
An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly…
9.8
CVE-2017-9148
The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an…