CVE-2007-1371
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Conquest 8.2a及之前版本中存在缓冲区溢出漏洞。本地用户可以通过查询发送被metaGetServerList处理的长服务器entry的元服务器，获得特权；远程元服务商可以借助由metaGetServerList处理的长服务器登录，执行任意代码；攻击者还可以通过超过元服务器的配置数量，造成未知影响；远程攻击者可以借助带有特定的(3)unum或(4)snum值的SP_CLIENTSTAT信息包，破坏内存。此漏洞不同于CVE-2003-0933。
Public Exploits 1
ExploitDB · 1
EDB-29717 [dos]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2007-1371
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple buffer overflows in Conquest 8.2a and earlier (1) allow local users to gain privileges by querying a metaserver that sends a long server entry processed by metaGetServerList and allow remote metaservers to execute arbitrary code via a long server entry processed by metaGetServerList; (2) allow attackers to have an unknown impact by exceeding the configured number of metaservers; and allow remote attackers to corrupt memory via a SP_CLIENTSTAT packet with certain values of (3) unum or (4) snum, different vulnerabilities than CVE-2003-0933.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Radscan Conquest 多缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Conquest 8.2a及之前版本中存在缓冲区溢出漏洞。本地用户可以通过查询发送被metaGetServerList处理的长服务器entry的元服务器，获得特权；远程元服务商可以借助由metaGetServerList处理的长服务器登录，执行任意代码；攻击者还可以通过超过元服务器的配置数量，造成未知影响；远程攻击者可以借助带有特定的(3)unum或(4)snum值的SP_CLIENTSTAT信息包，破坏内存。此漏洞不同于CVE-2003-0933。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2007-1371
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-1371
请登录查看更多情报信息。
Vendor Advisories for CVE-2007-1371 (6)
Other References for CVE-2007-1371 (2)
Same Patch Batch · n/a · 2007-03-10 · 45 CVEs total
| CVE-2007-1372 | PostGuestbook Header.PHP 远程文件包含漏洞 | |
| CVE-2007-1375 | PHP substr_compare函数 整数溢出漏洞 | |
| CVE-2007-1374 | Snitz Forums 2000 Pop_Profile.ASP 跨站脚本攻击漏洞 | |
| CVE-2007-1376 | PHP shmop函数 任意代码执行漏洞 | |
| CVE-2007-1379 | PHP Ovrimos extension ovrimos_close函数 任意代码执行漏洞 | |
| CVE-2007-1380 | PHP session extension php_binary serialization处理程序 信息泄露漏洞 | |
| CVE-2007-1381 | PHP 5 wddx.c wddx_deserialize函数 缓冲区溢出漏洞 | |
| CVE-2007-1382 | Windows的PHP COM执行任意代码漏洞 | |
| CVE-2007-1383 | PHP ZVAL引用计数器整数溢出漏洞 | |
| CVE-2007-1378 | PHP4 Ovrimos Extension ovrimos_longreadlen函数 内存写入漏洞 | |
| CVE-2007-1373 | Mercury Mail Transport System LOGIN命令远程缓冲区溢出漏洞 | |
| CVE-2007-0005 | Linux Kernel Omnikey CardMan 4040驱动本地溢出漏洞 | |
| CVE-2006-7163 | Dreameesoft Password Master 本地身份认证绕过漏洞 | |
| CVE-2007-1385 | KTorrent chunkcounter.cpp 拒绝服务攻击和堆破坏漏洞 | |
| CVE-2007-1384 | KTorrent torrent.cpp 目录遍历漏洞 | |
| CVE-2007-1388 | Linux Kernel ipv6_sockglue.c空指针引用漏洞 | |
| CVE-2007-1345 | CA eTrust Admin GINA模块权限提升漏洞 | |
| CVE-2007-0999 | Ekiga 未明格式化字符串漏洞 | |
| CVE-2007-1273 | NetBSD KTRUser函数整数溢出漏洞 | |
| CVE-2007-1365 | OpenBSD IPv6报文处理远程内核结构破坏指令执行漏洞 |
Showing top 20 of 45 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2007-1371
No comments yet