CVE-2007-2529
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2007-2529
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer signedness error in the acl (facl) system call in Solaris 10 before 20070507 allows local users to cause a denial of service (kernel panic) and possibly gain privileges via a certain argument, related to ACE_SETACL.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Sun Solaris ACE_SETACL本地拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的facl()系统调用实现上存在漏洞，本地攻击者可能利用此漏洞导致系统不可用。 facl()系统调用用于对文件设置访问控制。由于没有正确地检查向该函数所传送的ACE_SETACL参数，攻击者可能通过特制的参数导致内核分配大量的内存，造成内核忙碌。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2007-2529
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-2529
请登录查看更多情报信息。
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102869-1vendor-advisoryx_refsource_SUNALERT
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1669vdb-entrysignaturex_refsource_OVAL
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=524third-party-advisoryx_refsource_IDEFENSE
- https://nvd.nist.gov/vuln/detail/CVE-2007-2529
Same Patch Batch · n/a · 2007-05-09 · 79 CVEs total
| CVE-2007-2560 | ACGV Annu 'ACVG.PHP' 路径遍历漏洞 | |
| CVE-2007-2561 | FipsCMS PID Parameter 'index.asp' SQL注入漏洞 | |
| CVE-2007-2576 | East Wind Software advdaudio.ocx ActiveX控件缓冲区溢出漏洞 | |
| CVE-2007-2563 | VersalSoft HTTP File Upload ActiveX AddFile函数远程缓冲区溢出漏洞 | |
| CVE-2007-2564 | Sienzo Digital Music Mentor (DMM) 'DSKernel2.dll' 多个ActiveX控件缓冲区溢出漏洞 | |
| CVE-2007-2562 | Kayako eSupport 'index.php'_m参数跨站脚本攻击漏洞 | |
| CVE-2007-2559 | american cart 多个PHP远程文件包含漏洞 | |
| CVE-2007-2558 | phpFullAnnu CMS (pfa CMS) 'index.php'远程文件包含漏洞 | |
| CVE-2007-2557 | Mambo MOStlyDB Admin 安全跳过漏洞 | |
| CVE-2007-2556 | Nuked-Klan X-Forwarded-For HTTP头SQL注入漏洞 | |
| CVE-2007-2565 | Cdelia Software ImageProcessing 畸形的BMP文件拒绝服务漏洞 | |
| CVE-2007-2566 | Taltech Tal Bar Code控件SaveBarCode函数拒绝服务攻击漏洞 | |
| CVE-2007-2567 | Taltech Tal Bar Code ActiveX SaveBarCode函数缓冲区溢出漏洞 | |
| CVE-2007-2569 | Friendly 多个PHP远程文件包含漏洞 | |
| CVE-2007-2570 | Wikivi5 'show.php' sous_rep参数远程文件包含漏洞 | |
| CVE-2007-2571 | xoops wfquotes_module 'index.php'c参数SQL注入漏洞 | |
| CVE-2007-2572 | NoAh 'mfa_theme.php' tpls[1]参数远程文件包含漏洞 | |
| CVE-2007-2573 | PHPtree 'cms2.php'远程文件包含漏洞 | |
| CVE-2007-2574 | Archangel Weblog 'index.php'目录遍历漏洞 | |
| CVE-2007-2575 | Gallery vm 'watermark.php'远程文件包含漏洞 |
Showing top 20 of 79 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2007-2529
No comments yet