CVE-2007-3798

Scores

EPSS

0.727medium72.7%

0%20%40%60%80%100%

Percentile: 72.7%

CVSS

9.8critical3.x

0246810

CVSS Score: 9.8/10

All CVSS Scores

CVSS 3.x

9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0

6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.

Learn more about Scaner-VS 7

Sources

debiannvdredhat

CWEs

CWE-190CWE-252

Related Vulnerabilities

BDU:2015-09589

Exploits

Exploit ID: 30319

Source: exploitdb

URL: https://www.exploit-db.com/exploits/30319

Recommendations

Source: nvd

All tcpdump users should upgrade to the latest version:

# emerge –sync
# emerge –ask –oneshot –verbose “>=net-analyzer/tcpdump-3.9.5-r3”

URL: http://security.gentoo.org/glsa/glsa-200707-14.xml

Vulnerable Software (10)

Type: Configuration

Product: tcpdump

Operating System: debian

Trait:

{  "fixed": "3.9.5-3"}

Source: debian

Type: Configuration

Product: tcpdump

Operating System: rhel 4

Trait:

{  "fixed": "3.8.2-12.el4"}

Source: redhat

Type: Configuration

Product: tcpdump

Operating System: rhel 5

Trait:

{  "fixed": "3.9.4-11.el5"}

Source: redhat

Type: Configuration

Vendor: *

Product: debian_linux

Operating System: * * *

Trait:

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",...

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

Type: Configuration

Vendor: *

Product: freebsd

Operating System: * * *

Trait:

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",      "versionEndExcluding": "5.5",      "versionStartIncluding": "5.0",      "vulnerable": true    },    {...

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",      "versionEndExcluding": "5.5",      "versionStartIncluding": "5.0",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",      "versionEndExcluding": "6.1",      "versionStartIncluding": "6.0",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:-:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:p1:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:p11:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:p12:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:p13:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:p14:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:p2:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:p3:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:p4:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:p5:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:p7:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:p8:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:5.5:p9:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:-:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p1:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p10:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p11:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p12:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p13:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p16:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p17:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p18:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p2:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p4:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p6:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p7:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.1:p9:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.2:-:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.2:p1:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.2:p4:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.2:p5:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:freebsd:freebsd:6.2:p6:*:*:*:*:*:*",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

Type: Configuration

Vendor: *

Product: mac_os_x

Operating System: * * *

Trait:

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",      "versionEndExcluding": "10.4.11",      "versionStartIncluding": "10.0.0",      "vulnerable": true    },...

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",      "versionEndExcluding": "10.4.11",      "versionStartIncluding": "10.0.0",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",      "versionEndExcluding": "10.4.11",      "versionStartIncluding": "10.0.0",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

Type: Configuration

Vendor: *

Product: mac_os_x_server

Operating System: * * *

Trait:

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",      "versionEndExcluding": "10.4.11",      "versionStartIncluding": "10.0.0",      "vulnerable": true    },...

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",      "versionEndExcluding": "10.4.11",      "versionStartIncluding": "10.0.0",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*",      "versionEndExcluding": "10.4.11",      "versionStartIncluding": "10.0.0",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

Type: Configuration

Vendor: *

Product: slackware

Operating System: * * *

Trait:

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:slackware:slackware:9.0:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:slackware:slackware:9.1:*:*:*:*:*:*:*",...

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:slackware:slackware:9.0:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:slackware:slackware:9.1:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:slackware:slackware:10.0:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:slackware:slackware:10.1:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:slackware:slackware:10.2:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:slackware:slackware:11.0:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:slackware:slackware:12.0:*:*:*:*:*:*:*",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

Type: Configuration

Vendor: *

Product: tcpdump

Operating System: * * *

Trait:

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",      "versionEndIncluding": "3.9.6",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

Type: Configuration

Vendor: *

Product: ubuntu_linux

Operating System: * * *

Trait:

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*...

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

End of list

Russian Vulnerability Scanner Database

CVE-2007-3798

Scores

EPSS

CVSS

All CVSS Scores

Vector Breakdown

CVSS

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality Impact

Integrity Impact

Availability Impact

Vector Breakdown

CVSS

Attack Vector

Attack Complexity

Authentication

Confidentiality Impact

Integrity Impact

Availability Impact

Description

Scaner-VS 7 — a modern vulnerability management solution

Sources

CWEs

Related Vulnerabilities

Exploits

Recommendations

Vulnerable Software (10)