Bug 198997 - Kernel <= 2.6.23 CIFS VFS buffer overflows (CVE-2007-5904)
Bug#: 198997 (CVE-2007-5904) Product:  Gentoo Security Version: unspecified Platform: All
OS/Version: Linux Status: NEW Severity: normal Priority: P2
Resolution:  Assigned To: security@gentoo.org Reported By: rbu@gentoo.org
Component: Kernel
URL:  http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git;a=commit;h=133672efbc1085f9af990bdc145e1822ea93bcf3
Summary: Kernel <= 2.6.23 CIFS VFS buffer overflows (CVE-2007-5904)
Keywords:  
Status Whiteboard: [linux < 2.6.24][genpatches < 2.6.24-1]
Opened: 2007-11-12 23:42 0000
Description:   Opened: 2007-11-12 23:42 0000 
CVE-2007-5904 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5904):
  Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier
  allows remote attackers to cause a denial of service (crash) and possibly
  execute arbitrary code via long SMB responses that trigger the overflows in
  the SendReceive function.

------- Comment #1 From Jakub Moc (RETIRED) 2007-11-13 12:20:37 0000 ------- 
*** Bug 199032 has been marked as a duplicate of this bug. ***

------- Comment #2 From Robert Buchholz 2007-11-15 11:48:34 0000 ------- 
*** Bug 199227 has been marked as a duplicate of this bug. ***