Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2007-3798

EPSS 72.69% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2007-3798

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
TCPDump print-bgp.c文件远程整数下溢漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TCPDump是一款免费的网络分析程序,适用于多种Unix操作系统。 TCPDump在处理畸形BGP报文时存在漏洞,远程攻击者可能利用此漏洞控制运行了TCPDump的机器。 TCPDump的print-bgp.c文件没有正确地使用snprintf()的返回值。如果攻击者发送了特制的BGP报文的话,就可能触发整数下溢,导致执行任意指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2007-3798

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2007-3798

登录查看更多情报信息。

Same Patch Batch · n/a · 2007-07-16 · 6 CVEs total

CVE-2007-3799PHP EXT/Session HTTP响应页眉注入漏洞
CVE-2007-3800Symantec AntiVirus本地权限提升漏洞
CVE-2007-3803The in Clavister CorePlus SMTP指令绕过漏洞
CVE-2007-3804The engine in the in Clavister CorePlus AntiVirus引擎绕过漏洞
CVE-2007-3805Clavister CorePlus 拒绝服务漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2007-3798

No comments yet


Leave a comment