CVE-2007-0080

MediumCVSS 6.6/10Last modified Jun 16, 2026

Description

Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the server desthost field of an SMB_Handle_Type instance. NOTE: the impact of this issue has been disputed by a reliable third party and the vendor, who states that exploitation is limited "only to local administrators who have write access to the server configuration files." CVE concurs with the dispute

Metrics

CVSS 2.0 6.6/10AV:L/AC:M/Au:S/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Jan 5, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-00816.8Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpap CVE-2007-00826.5users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated CVE-2007-00836.8Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a CVE-2007-00846.6Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long M CVE-2007-00856.0Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when the kernel is compiled CVE-2007-00867.8The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of servic CVE-2007-00877.8Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows remote attackers to c CVE-2007-00885.0Multiple directory traversal vulnerabilities in openmedia allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) src p CVE-2007-00897.5jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database CVE-2007-00907.5WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a data CVE-2007-00917.5newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a da CVE-2007-00927.5SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL commands via the produc