CVE-2007-3798 (GCVE-0-2007-3798)
Vulnerability from cvelistv5
Published
2007-07-16 22:00
Modified
2024-10-15 14:18
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
  • n/a
Summary
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
References
cve@mitre.org http://bugs.gentoo.org/show_bug.cgi?id=184815 Third Party Advisory
cve@mitre.org http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11&r2=1.91.2.12 Broken Link
cve@mitre.org http://docs.info.apple.com/article.html?artnum=307179 Broken Link
cve@mitre.org http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html Mailing List
cve@mitre.org http://secunia.com/advisories/26135 Broken Link, Vendor Advisory
cve@mitre.org http://secunia.com/advisories/26168 Broken Link, Vendor Advisory
cve@mitre.org http://secunia.com/advisories/26223 Broken Link, Vendor Advisory
cve@mitre.org http://secunia.com/advisories/26231 Broken Link, Vendor Advisory
cve@mitre.org http://secunia.com/advisories/26263 Broken Link, Vendor Advisory
cve@mitre.org http://secunia.com/advisories/26266 Broken Link, Vendor Advisory
cve@mitre.org http://secunia.com/advisories/26286 Broken Link, Vendor Advisory
cve@mitre.org http://secunia.com/advisories/26395 Broken Link, Vendor Advisory
cve@mitre.org http://secunia.com/advisories/26404 Broken Link, Vendor Advisory
cve@mitre.org http://secunia.com/advisories/26521 Broken Link, Vendor Advisory
cve@mitre.org http://secunia.com/advisories/27580 Broken Link, Vendor Advisory
cve@mitre.org http://secunia.com/advisories/28136 Broken Link, Vendor Advisory
cve@mitre.org http://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc Third Party Advisory
cve@mitre.org http://security.gentoo.org/glsa/glsa-200707-14.xml Third Party Advisory
cve@mitre.org http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.449313 Mailing List, Patch
cve@mitre.org http://www.debian.org/security/2007/dsa-1353 Third Party Advisory
cve@mitre.org http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c Exploit
cve@mitre.org http://www.mandriva.com/security/advisories?name=MDKSA-2007:148 Third Party Advisory
cve@mitre.org http://www.novell.com/linux/security/advisories/2007_16_sr.html Broken Link
cve@mitre.org http://www.redhat.com/support/errata/RHSA-2007-0368.html Broken Link
cve@mitre.org http://www.redhat.com/support/errata/RHSA-2007-0387.html Broken Link, Vendor Advisory
cve@mitre.org http://www.securityfocus.com/archive/1/474225/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org http://www.securityfocus.com/bid/24965 Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org http://www.securitytracker.com/id?1018434 Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org http://www.trustix.org/errata/2007/0023/ Broken Link
cve@mitre.org http://www.turbolinux.com/security/2007/TLSA-2007-46.txt Broken Link
cve@mitre.org http://www.ubuntu.com/usn/usn-492-1 Third Party Advisory
cve@mitre.org http://www.us-cert.gov/cas/techalerts/TA07-352A.html Broken Link, Third Party Advisory, US Government Resource
cve@mitre.org http://www.vupen.com/english/advisories/2007/2578 Broken Link, Vendor Advisory
cve@mitre.org http://www.vupen.com/english/advisories/2007/4238 Broken Link, Vendor Advisory
cve@mitre.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771 Broken Link
af854a3a-2127-422b-91ae-364da2661108 http://bugs.gentoo.org/show_bug.cgi?id=184815 Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11&r2=1.91.2.12 Broken Link
af854a3a-2127-422b-91ae-364da2661108 http://docs.info.apple.com/article.html?artnum=307179 Broken Link
af854a3a-2127-422b-91ae-364da2661108 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html Mailing List
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26135 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26168 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26223 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26231 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26263 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26266 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26286 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26395 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26404 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26521 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/27580 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/28136 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 http://security.gentoo.org/glsa/glsa-200707-14.xml Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.449313 Mailing List, Patch
af854a3a-2127-422b-91ae-364da2661108 http://www.debian.org/security/2007/dsa-1353 Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c Exploit
af854a3a-2127-422b-91ae-364da2661108 http://www.mandriva.com/security/advisories?name=MDKSA-2007:148 Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 http://www.novell.com/linux/security/advisories/2007_16_sr.html Broken Link
af854a3a-2127-422b-91ae-364da2661108 http://www.redhat.com/support/errata/RHSA-2007-0368.html Broken Link
af854a3a-2127-422b-91ae-364da2661108 http://www.redhat.com/support/errata/RHSA-2007-0387.html Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/archive/1/474225/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/bid/24965 Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 http://www.securitytracker.com/id?1018434 Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 http://www.trustix.org/errata/2007/0023/ Broken Link
af854a3a-2127-422b-91ae-364da2661108 http://www.turbolinux.com/security/2007/TLSA-2007-46.txt Broken Link
af854a3a-2127-422b-91ae-364da2661108 http://www.ubuntu.com/usn/usn-492-1 Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 http://www.us-cert.gov/cas/techalerts/TA07-352A.html Broken Link, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 http://www.vupen.com/english/advisories/2007/2578 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://www.vupen.com/english/advisories/2007/4238 Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771 Broken Link
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:28:52.458Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2007:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0387.html"
          },
          {
            "name": "26231",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26231"
          },
          {
            "name": "SUSE-SR:2007:016",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_16_sr.html"
          },
          {
            "name": "ADV-2007-4238",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4238"
          },
          {
            "name": "TA07-352A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-352A.html"
          },
          {
            "name": "26168",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26168"
          },
          {
            "name": "27580",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27580"
          },
          {
            "name": "28136",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28136"
          },
          {
            "name": "26286",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26286"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=184815"
          },
          {
            "name": "SSA:2007-230-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.449313"
          },
          {
            "name": "MDKSA-2007:148",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:148"
          },
          {
            "name": "1018434",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018434"
          },
          {
            "name": "RHSA-2007:0368",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0368.html"
          },
          {
            "name": "26263",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26263"
          },
          {
            "name": "20070720 rPSA-2007-0147-1 tcpdump",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/474225/100/0/threaded"
          },
          {
            "name": "26223",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26223"
          },
          {
            "name": "APPLE-SA-2007-12-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html"
          },
          {
            "name": "2007-0023",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0023/"
          },
          {
            "name": "oval:org.mitre.oval:def:9771",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771"
          },
          {
            "name": "FreeBSD-SA-07:06",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "http://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11\u0026r2=1.91.2.12"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=307179"
          },
          {
            "name": "26395",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26395"
          },
          {
            "name": "26266",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26266"
          },
          {
            "name": "TLSA-2007-46",
            "tags": [
              "vendor-advisory",
              "x_refsource_TURBO",
              "x_transferred"
            ],
            "url": "http://www.turbolinux.com/security/2007/TLSA-2007-46.txt"
          },
          {
            "name": "26521",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26521"
          },
          {
            "name": "ADV-2007-2578",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2578"
          },
          {
            "name": "26404",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26404"
          },
          {
            "name": "26135",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26135"
          },
          {
            "name": "USN-492-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-492-1"
          },
          {
            "name": "DSA-1353",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1353"
          },
          {
            "name": "GLSA-200707-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200707-14.xml"
          },
          {
            "name": "24965",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24965"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2007-3798",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-15T14:17:36.142524Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-252",
                "description": "CWE-252 Unchecked Return Value",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-15T14:18:21.831Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2007:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0387.html"
        },
        {
          "name": "26231",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26231"
        },
        {
          "name": "SUSE-SR:2007:016",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_16_sr.html"
        },
        {
          "name": "ADV-2007-4238",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4238"
        },
        {
          "name": "TA07-352A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-352A.html"
        },
        {
          "name": "26168",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26168"
        },
        {
          "name": "27580",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27580"
        },
        {
          "name": "28136",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28136"
        },
        {
          "name": "26286",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26286"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=184815"
        },
        {
          "name": "SSA:2007-230-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.449313"
        },
        {
          "name": "MDKSA-2007:148",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:148"
        },
        {
          "name": "1018434",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018434"
        },
        {
          "name": "RHSA-2007:0368",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0368.html"
        },
        {
          "name": "26263",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26263"
        },
        {
          "name": "20070720 rPSA-2007-0147-1 tcpdump",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/474225/100/0/threaded"
        },
        {
          "name": "26223",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26223"
        },
        {
          "name": "APPLE-SA-2007-12-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html"
        },
        {
          "name": "2007-0023",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0023/"
        },
        {
          "name": "oval:org.mitre.oval:def:9771",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771"
        },
        {
          "name": "FreeBSD-SA-07:06",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "http://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11\u0026r2=1.91.2.12"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=307179"
        },
        {
          "name": "26395",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26395"
        },
        {
          "name": "26266",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26266"
        },
        {
          "name": "TLSA-2007-46",
          "tags": [
            "vendor-advisory",
            "x_refsource_TURBO"
          ],
          "url": "http://www.turbolinux.com/security/2007/TLSA-2007-46.txt"
        },
        {
          "name": "26521",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26521"
        },
        {
          "name": "ADV-2007-2578",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2578"
        },
        {
          "name": "26404",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26404"
        },
        {
          "name": "26135",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26135"
        },
        {
          "name": "USN-492-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-492-1"
        },
        {
          "name": "DSA-1353",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1353"
        },
        {
          "name": "GLSA-200707-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200707-14.xml"
        },
        {
          "name": "24965",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24965"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3798",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2007:0387",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0387.html"
            },
            {
              "name": "26231",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26231"
            },
            {
              "name": "SUSE-SR:2007:016",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_16_sr.html"
            },
            {
              "name": "ADV-2007-4238",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4238"
            },
            {
              "name": "TA07-352A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA07-352A.html"
            },
            {
              "name": "26168",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26168"
            },
            {
              "name": "27580",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27580"
            },
            {
              "name": "28136",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28136"
            },
            {
              "name": "26286",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26286"
            },
            {
              "name": "http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c",
              "refsource": "MISC",
              "url": "http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=184815",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=184815"
            },
            {
              "name": "SSA:2007-230-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.449313"
            },
            {
              "name": "MDKSA-2007:148",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:148"
            },
            {
              "name": "1018434",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018434"
            },
            {
              "name": "RHSA-2007:0368",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0368.html"
            },
            {
              "name": "26263",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26263"
            },
            {
              "name": "20070720 rPSA-2007-0147-1 tcpdump",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/474225/100/0/threaded"
            },
            {
              "name": "26223",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26223"
            },
            {
              "name": "APPLE-SA-2007-12-17",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html"
            },
            {
              "name": "2007-0023",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2007/0023/"
            },
            {
              "name": "oval:org.mitre.oval:def:9771",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771"
            },
            {
              "name": "FreeBSD-SA-07:06",
              "refsource": "FREEBSD",
              "url": "http://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc"
            },
            {
              "name": "http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11\u0026r2=1.91.2.12",
              "refsource": "MISC",
              "url": "http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11\u0026r2=1.91.2.12"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=307179",
              "refsource": "CONFIRM",
              "url": "http://docs.info.apple.com/article.html?artnum=307179"
            },
            {
              "name": "26395",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26395"
            },
            {
              "name": "26266",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26266"
            },
            {
              "name": "TLSA-2007-46",
              "refsource": "TURBO",
              "url": "http://www.turbolinux.com/security/2007/TLSA-2007-46.txt"
            },
            {
              "name": "26521",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26521"
            },
            {
              "name": "ADV-2007-2578",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2578"
            },
            {
              "name": "26404",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26404"
            },
            {
              "name": "26135",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26135"
            },
            {
              "name": "USN-492-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-492-1"
            },
            {
              "name": "DSA-1353",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1353"
            },
            {
              "name": "GLSA-200707-14",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200707-14.xml"
            },
            {
              "name": "24965",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24965"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3798",
    "datePublished": "2007-07-16T22:00:00",
    "dateReserved": "2007-07-16T00:00:00",
    "dateUpdated": "2024-10-15T14:18:21.831Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2007-3798\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2007-07-16T22:30:00.000\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.\"},{\"lang\":\"es\",\"value\":\"Un desbordamiento de enteros en el archivo print-bgp.c en el disector BGP en tcpdump versi\u00f3n 3.9.6 y anteriores, permite a atacantes remotos ejecutar c\u00f3digo arbitrario por medio de TLVs especialmente dise\u00f1ados en un paquete BGP, relacionado a un valor de retorno no comprobado.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-252\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-252\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"3.9.6\",\"matchCriteriaId\":\"9BFFEF20-AB6E-4D82-81A9-B7AED327540C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23E304C9-F780-4358-A58D-1E4C93977704\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6EBDAFF8-DE44-4E80-B6BD-E341F767F501\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F92AB32-E7DE-43F4-B877-1F41FA162EC7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:slackware:slackware:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"399C55D7-0D4D-4D1F-B0C0-5BEF084BBFA7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:slackware:slackware:9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"644AEB96-EABA-4637-8C51-6E8AE7BB7299\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:slackware:slackware:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"258358F0-DC55-44D8-9440-C803C8C5FDC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:slackware:slackware:10.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"653831E7-C117-4CD7-ADA4-11E6FE15A897\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:slackware:slackware:10.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1BACED6-11B1-44C7-82CC-AAD7C424112E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:slackware:slackware:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BE76350-E2BF-499C-BC2B-A82ADCC20037\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:slackware:slackware:12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FD92835-0C55-4FD8-9808-393AC77F45B6\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.0\",\"versionEndExcluding\":\"5.5\",\"matchCriteriaId\":\"C25C4C48-0C37-4B55-9124-4D3EFA6A7B98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0\",\"versionEndExcluding\":\"6.1\",\"matchCriteriaId\":\"5CD4018D-F0ED-407F-8C94-CD6095871948\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"4E63AC19-08C0-476A-B557-0CCC24A4DC88\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"46589B30-1A6C-4764-BBC5-969E2BE82F65\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3565238-C0D8-4196-BE25-5A0E9CB18F07\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EEBA213-0CE9-4C14-B543-02323421698B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"33229F64-E6CA-436B-A495-C753CF268068\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:p14:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF3D3B09-4505-4FBE-BD78-CF106530B9F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB8ED096-29AB-4509-92C9-E9AA9D3653FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6751AB8-2F96-45CE-A2B1-F13621599009\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA3B6BBC-3EA2-445B-94B1-B079ABB0B22D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"44136741-534D-4D3B-83E2-E1D2D367953B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"5050EAD4-3635-4EBA-BA53-3CCF4D291269\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"C21700B9-9A63-41C2-92AA-3F4FB9DA68C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.5:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DE96008-FDC8-480A-B144-079086CCCE29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"B513BA9C-C121-4DCB-912F-529727217E8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"25273989-AC00-4649-BEAE-68F27DA09E15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F756D1C-1DF7-484E-8A28-FE4886EC8DA7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"6CA31CA1-A913-4E5B-A38B-F39A734602DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4439012-E5BD-4D24-8E37-B78368AFFCDD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"11CDF5CE-C4E8-4DEF-A1FC-C6FF8386D227\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p16:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF0868FD-2166-4C97-BA26-AB04FFDD53D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p17:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9D30D8B-0A80-4D57-BC7A-6E948CD03E61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p18:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8C40E1F-F185-4FBF-A93D-86222DBE4BC1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB7A908F-7983-479D-B17F-5E8C0DB1E2B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1057593-E615-45AE-AFED-BEB83BBA8B03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"FBF6AEE8-F623-4DAF-88D6-D2996C3E4371\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"644CDF2C-D0E2-47CC-B891-50F75FE9AD41\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.1:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B7A0851-82B7-4AFE-B497-143770AC2BEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"99009B85-61C6-4113-B3EF-40B8F330B65C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.2:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"34B2D56E-32CE-4892-958A-CE339F69D63C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.2:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBCED956-7969-40E0-8E45-8A8DB8C4473F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.2:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"285D90AC-242A-403F-BB38-A52459523B4A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:6.2:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7749CCD-6474-4E81-8C08-F44EF0C306A9\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.0.0\",\"versionEndExcluding\":\"10.4.11\",\"matchCriteriaId\":\"2F5DEE66-117C-4844-8FD4-065D0820A808\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.0.0\",\"versionEndExcluding\":\"10.4.11\",\"matchCriteriaId\":\"B9ACE85A-56A0-404C-AB58-A4F5CA73243C\"}]}]}],\"references\":[{\"url\":\"http://bugs.gentoo.org/show_bug.cgi?id=184815\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11\u0026r2=1.91.2.12\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://docs.info.apple.com/article.html?artnum=307179\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://secunia.com/advisories/26135\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26168\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26223\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26231\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26263\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26266\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26286\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26395\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26404\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26521\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/27580\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/28136\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200707-14.xml\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.449313\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Patch\"]},{\"url\":\"http://www.debian.org/security/2007/dsa-1353\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2007:148\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.novell.com/linux/security/advisories/2007_16_sr.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2007-0368.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2007-0387.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/474225/100/0/threaded\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/24965\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id?1018434\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.trustix.org/errata/2007/0023/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.turbolinux.com/security/2007/TLSA-2007-46.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.ubuntu.com/usn/usn-492-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA07-352A.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"http://www.vupen.com/english/advisories/2007/2578\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2007/4238\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://bugs.gentoo.org/show_bug.cgi?id=184815\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11\u0026r2=1.91.2.12\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://docs.info.apple.com/article.html?artnum=307179\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://secunia.com/advisories/26135\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26168\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26223\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26231\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26263\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26266\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26286\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26395\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26404\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/26521\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/27580\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/28136\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200707-14.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.449313\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Patch\"]},{\"url\":\"http://www.debian.org/security/2007/dsa-1353\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2007:148\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.novell.com/linux/security/advisories/2007_16_sr.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2007-0368.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2007-0387.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/474225/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/24965\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id?1018434\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.trustix.org/errata/2007/0023/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.turbolinux.com/security/2007/TLSA-2007-46.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.ubuntu.com/usn/usn-492-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA07-352A.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"http://www.vupen.com/english/advisories/2007/2578\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2007/4238\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]}],\"vendorComments\":[{\"organization\":\"Red Hat\",\"comment\":\"This issue does not affect the version of tcpdump shipped in Red Hat Enterprise Linux 2.1 or 3.\\n\\nRed Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=250275\\n\\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/\",\"lastModified\":\"2007-07-31T00:00:00\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.redhat.com/support/errata/RHSA-2007-0387.html\", \"name\": \"RHSA-2007:0387\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/26231\", \"name\": \"26231\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://www.novell.com/linux/security/advisories/2007_16_sr.html\", \"name\": \"SUSE-SR:2007:016\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2007/4238\", \"name\": \"ADV-2007-4238\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\", \"x_transferred\"]}, {\"url\": \"http://www.us-cert.gov/cas/techalerts/TA07-352A.html\", \"name\": \"TA07-352A\", \"tags\": [\"third-party-advisory\", \"x_refsource_CERT\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/26168\", \"name\": \"26168\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/27580\", \"name\": \"27580\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/28136\", \"name\": \"28136\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/26286\", \"name\": \"26286\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"http://bugs.gentoo.org/show_bug.cgi?id=184815\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.449313\", \"name\": \"SSA:2007-230-01\", \"tags\": [\"vendor-advisory\", \"x_refsource_SLACKWARE\", \"x_transferred\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2007:148\", \"name\": \"MDKSA-2007:148\", \"tags\": [\"vendor-advisory\", \"x_refsource_MANDRIVA\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id?1018434\", \"name\": \"1018434\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2007-0368.html\", \"name\": \"RHSA-2007:0368\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/26263\", \"name\": \"26263\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/474225/100/0/threaded\", \"name\": \"20070720 rPSA-2007-0147-1 tcpdump\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/26223\", \"name\": \"26223\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html\", \"name\": \"APPLE-SA-2007-12-17\", \"tags\": [\"vendor-advisory\", \"x_refsource_APPLE\", \"x_transferred\"]}, {\"url\": \"http://www.trustix.org/errata/2007/0023/\", \"name\": \"2007-0023\", \"tags\": [\"vendor-advisory\", \"x_refsource_TRUSTIX\", \"x_transferred\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771\", \"name\": \"oval:org.mitre.oval:def:9771\", \"tags\": [\"vdb-entry\", \"signature\", \"x_refsource_OVAL\", \"x_transferred\"]}, {\"url\": \"http://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc\", \"name\": \"FreeBSD-SA-07:06\", \"tags\": [\"vendor-advisory\", \"x_refsource_FREEBSD\", \"x_transferred\"]}, {\"url\": \"http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11\u0026r2=1.91.2.12\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"http://docs.info.apple.com/article.html?artnum=307179\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/26395\", \"name\": \"26395\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/26266\", \"name\": \"26266\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://www.turbolinux.com/security/2007/TLSA-2007-46.txt\", \"name\": \"TLSA-2007-46\", \"tags\": [\"vendor-advisory\", \"x_refsource_TURBO\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/26521\", \"name\": \"26521\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2007/2578\", \"name\": \"ADV-2007-2578\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/26404\", \"name\": \"26404\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/26135\", \"name\": \"26135\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://www.ubuntu.com/usn/usn-492-1\", \"name\": \"USN-492-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"]}, {\"url\": \"http://www.debian.org/security/2007/dsa-1353\", \"name\": \"DSA-1353\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\", \"x_transferred\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200707-14.xml\", \"name\": \"GLSA-200707-14\", \"tags\": [\"vendor-advisory\", \"x_refsource_GENTOO\", \"x_transferred\"]}, {\"url\": \"http://www.securityfocus.com/bid/24965\", \"name\": \"24965\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-07T14:28:52.458Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2007-3798\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-15T14:17:36.142524Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-252\", \"description\": \"CWE-252 Unchecked Return Value\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-15T14:18:15.823Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"datePublic\": \"2007-07-16T00:00:00\", \"references\": [{\"url\": \"http://www.redhat.com/support/errata/RHSA-2007-0387.html\", \"name\": \"RHSA-2007:0387\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"http://secunia.com/advisories/26231\", \"name\": \"26231\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://www.novell.com/linux/security/advisories/2007_16_sr.html\", \"name\": \"SUSE-SR:2007:016\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2007/4238\", \"name\": \"ADV-2007-4238\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\"]}, {\"url\": \"http://www.us-cert.gov/cas/techalerts/TA07-352A.html\", \"name\": \"TA07-352A\", \"tags\": [\"third-party-advisory\", \"x_refsource_CERT\"]}, {\"url\": \"http://secunia.com/advisories/26168\", \"name\": \"26168\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://secunia.com/advisories/27580\", \"name\": \"27580\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://secunia.com/advisories/28136\", \"name\": \"28136\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://secunia.com/advisories/26286\", \"name\": \"26286\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"http://bugs.gentoo.org/show_bug.cgi?id=184815\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.449313\", \"name\": \"SSA:2007-230-01\", \"tags\": [\"vendor-advisory\", \"x_refsource_SLACKWARE\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2007:148\", \"name\": \"MDKSA-2007:148\", \"tags\": [\"vendor-advisory\", \"x_refsource_MANDRIVA\"]}, {\"url\": \"http://www.securitytracker.com/id?1018434\", \"name\": \"1018434\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2007-0368.html\", \"name\": \"RHSA-2007:0368\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"http://secunia.com/advisories/26263\", \"name\": \"26263\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/474225/100/0/threaded\", \"name\": \"20070720 rPSA-2007-0147-1 tcpdump\", \"tags\": [\"mailing-list\", \"x_refsource_BUGTRAQ\"]}, {\"url\": \"http://secunia.com/advisories/26223\", \"name\": \"26223\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html\", \"name\": \"APPLE-SA-2007-12-17\", \"tags\": [\"vendor-advisory\", \"x_refsource_APPLE\"]}, {\"url\": \"http://www.trustix.org/errata/2007/0023/\", \"name\": \"2007-0023\", \"tags\": [\"vendor-advisory\", \"x_refsource_TRUSTIX\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771\", \"name\": \"oval:org.mitre.oval:def:9771\", \"tags\": [\"vdb-entry\", \"signature\", \"x_refsource_OVAL\"]}, {\"url\": \"http://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc\", \"name\": \"FreeBSD-SA-07:06\", \"tags\": [\"vendor-advisory\", \"x_refsource_FREEBSD\"]}, {\"url\": \"http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11\u0026r2=1.91.2.12\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"http://docs.info.apple.com/article.html?artnum=307179\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"http://secunia.com/advisories/26395\", \"name\": \"26395\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://secunia.com/advisories/26266\", \"name\": \"26266\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://www.turbolinux.com/security/2007/TLSA-2007-46.txt\", \"name\": \"TLSA-2007-46\", \"tags\": [\"vendor-advisory\", \"x_refsource_TURBO\"]}, {\"url\": \"http://secunia.com/advisories/26521\", \"name\": \"26521\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2007/2578\", \"name\": \"ADV-2007-2578\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\"]}, {\"url\": \"http://secunia.com/advisories/26404\", \"name\": \"26404\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://secunia.com/advisories/26135\", \"name\": \"26135\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://www.ubuntu.com/usn/usn-492-1\", \"name\": \"USN-492-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"]}, {\"url\": \"http://www.debian.org/security/2007/dsa-1353\", \"name\": \"DSA-1353\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200707-14.xml\", \"name\": \"GLSA-200707-14\", \"tags\": [\"vendor-advisory\", \"x_refsource_GENTOO\"]}, {\"url\": \"http://www.securityfocus.com/bid/24965\", \"name\": \"24965\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2018-10-15T20:57:01\"}, \"x_legacyV4Record\": {\"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"n/a\"}]}, \"product_name\": \"n/a\"}]}, \"vendor_name\": \"n/a\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"http://www.redhat.com/support/errata/RHSA-2007-0387.html\", \"name\": \"RHSA-2007:0387\", \"refsource\": \"REDHAT\"}, {\"url\": \"http://secunia.com/advisories/26231\", \"name\": \"26231\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://www.novell.com/linux/security/advisories/2007_16_sr.html\", \"name\": \"SUSE-SR:2007:016\", \"refsource\": \"SUSE\"}, {\"url\": \"http://www.vupen.com/english/advisories/2007/4238\", \"name\": \"ADV-2007-4238\", \"refsource\": \"VUPEN\"}, {\"url\": \"http://www.us-cert.gov/cas/techalerts/TA07-352A.html\", \"name\": \"TA07-352A\", \"refsource\": \"CERT\"}, {\"url\": \"http://secunia.com/advisories/26168\", \"name\": \"26168\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://secunia.com/advisories/27580\", \"name\": \"27580\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://secunia.com/advisories/28136\", \"name\": \"28136\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://secunia.com/advisories/26286\", \"name\": \"26286\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c\", \"name\": \"http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c\", \"refsource\": \"MISC\"}, {\"url\": \"http://bugs.gentoo.org/show_bug.cgi?id=184815\", \"name\": \"http://bugs.gentoo.org/show_bug.cgi?id=184815\", \"refsource\": \"CONFIRM\"}, {\"url\": \"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.449313\", \"name\": \"SSA:2007-230-01\", \"refsource\": \"SLACKWARE\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2007:148\", \"name\": \"MDKSA-2007:148\", \"refsource\": \"MANDRIVA\"}, {\"url\": \"http://www.securitytracker.com/id?1018434\", \"name\": \"1018434\", \"refsource\": \"SECTRACK\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2007-0368.html\", \"name\": \"RHSA-2007:0368\", \"refsource\": \"REDHAT\"}, {\"url\": \"http://secunia.com/advisories/26263\", \"name\": \"26263\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://www.securityfocus.com/archive/1/474225/100/0/threaded\", \"name\": \"20070720 rPSA-2007-0147-1 tcpdump\", \"refsource\": \"BUGTRAQ\"}, {\"url\": \"http://secunia.com/advisories/26223\", \"name\": \"26223\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html\", \"name\": \"APPLE-SA-2007-12-17\", \"refsource\": \"APPLE\"}, {\"url\": \"http://www.trustix.org/errata/2007/0023/\", \"name\": \"2007-0023\", \"refsource\": \"TRUSTIX\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771\", \"name\": \"oval:org.mitre.oval:def:9771\", \"refsource\": \"OVAL\"}, {\"url\": \"http://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc\", \"name\": \"FreeBSD-SA-07:06\", \"refsource\": \"FREEBSD\"}, {\"url\": \"http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11\u0026r2=1.91.2.12\", \"name\": \"http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11\u0026r2=1.91.2.12\", \"refsource\": \"MISC\"}, {\"url\": \"http://docs.info.apple.com/article.html?artnum=307179\", \"name\": \"http://docs.info.apple.com/article.html?artnum=307179\", \"refsource\": \"CONFIRM\"}, {\"url\": \"http://secunia.com/advisories/26395\", \"name\": \"26395\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://secunia.com/advisories/26266\", \"name\": \"26266\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://www.turbolinux.com/security/2007/TLSA-2007-46.txt\", \"name\": \"TLSA-2007-46\", \"refsource\": \"TURBO\"}, {\"url\": \"http://secunia.com/advisories/26521\", \"name\": \"26521\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://www.vupen.com/english/advisories/2007/2578\", \"name\": \"ADV-2007-2578\", \"refsource\": \"VUPEN\"}, {\"url\": \"http://secunia.com/advisories/26404\", \"name\": \"26404\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://secunia.com/advisories/26135\", \"name\": \"26135\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://www.ubuntu.com/usn/usn-492-1\", \"name\": \"USN-492-1\", \"refsource\": \"UBUNTU\"}, {\"url\": \"http://www.debian.org/security/2007/dsa-1353\", \"name\": \"DSA-1353\", \"refsource\": \"DEBIAN\"}, {\"url\": \"http://security.gentoo.org/glsa/glsa-200707-14.xml\", \"name\": \"GLSA-200707-14\", \"refsource\": \"GENTOO\"}, {\"url\": \"http://www.securityfocus.com/bid/24965\", \"name\": \"24965\", \"refsource\": \"BID\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"n/a\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2007-3798\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"cve@mitre.org\"}}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2007-3798\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-10-15T14:18:21.831Z\", \"dateReserved\": \"2007-07-16T00:00:00\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2007-07-16T22:00:00\", \"assignerShortName\": \"mitre\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.