ByteOS Network

NVD Vulnerability Details :

CVE-2007-1865

Modified

Source-secalert@redhat.com

Published At-18 Sep, 2007 | 19:17

Updated At-07 Aug, 2024 | 13:15

The ipv6_getsockopt_sticky function in the kernel in Red Hat Enterprise Linux (RHEL) Beta 5.1.0 allows local users to obtain sensitive information (kernel memory contents) via a negative value of the len parameter. NOTE: this issue has been disputed in a bug comment, stating that "len is ignored when copying header info to the user's buffer.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	1.9	LOW	AV:L/AC:M/Au:N/C:P/I:N/A:N

CPE Matches

Red Hat, Inc.

>>enterprise_linux>>5.1.0

cpe:2.3:o:redhat:enterprise_linux:5.1.0:beta:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-189	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://osvdb.org/45909	secalert@redhat.com	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=232045	secalert@redhat.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History