CVE-2007-4570 - Vulnerability Details - OpenCVE

Algorithmic complexity vulnerability in the MCS translation daemon in mcstrans 0.2.3 allows local users to cause a denial of service (temporary daemon outage) via a large range of compartments in sensitivity labels.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Redhat	Enterprise Linux Mcstrans

Configuration 1 [-]

AND

cpe:2.3:o:redhat:enterprise_linux:5.0:unkown:server:*:*:*:*:*

cpe:2.3:a:redhat:mcstrans:0.2.3:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:redhat:enterprise_linux:5.0:unkown:client:*:*:*:*:*

cpe:2.3:a:redhat:mcstrans:0.2.3:*:*:*:*:*:*:*

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 5
mcstrans-0:0.2.6-1.el5	cpe:/o:redhat:enterprise_linux:5	RHSA-2007:0542	2007-11-07T00:00:00Z

References

Link	Providers
http://osvdb.org/39244
http://secunia.com/advisories/27589
http://www.securityfocus.com/bid/26371
https://bugzilla.redhat.com/attachment.cgi?id=193951
https://bugzilla.redhat.com/show_bug.cgi?id=288201
https://exchange.xforce.ibmcloud.com/vulnerabilities/38357
https://nvd.nist.gov/vuln/detail/CVE-2007-4570
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10350
https://rhn.redhat.com/errata/RHSA-2007-0542.html
https://www.cve.org/CVERecord?id=CVE-2007-4570

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2007-11-10T00:00:00

Updated: 2024-08-07T15:01:09.888Z

Reserved: 2007-08-28T00:00:00

Link: CVE-2007-4570

Vulnrichment

No data.

NVD

Status : Modified

Published: 2007-11-10T00:46:00.000

Modified: 2024-11-21T00:35:55.147

Link: CVE-2007-4570

Redhat

Severity : Low

Publid Date: 2007-11-07T00:00:00Z

Links: CVE-2007-4570 - Bugzilla

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-11-07T00:00:00", "descriptions": [{"lang": "en", "value": "Algorithmic complexity vulnerability in the MCS translation daemon in mcstrans 0.2.3 allows local users to cause a denial of service (temporary daemon outage) via a large range of compartments in sensitivity labels."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-28T12:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=288201"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/attachment.cgi?id=193951"}, {"name": "27589", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27589"}, {"name": "39244", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/39244"}, {"name": "rhel-mctrans-dos(38357)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38357"}, {"name": "RHSA-2007:0542", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://rhn.redhat.com/errata/RHSA-2007-0542.html"}, {"name": "oval:org.mitre.oval:def:10350", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10350"}, {"name": "26371", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/26371"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:01:09.888Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=288201"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/attachment.cgi?id=193951"}, {"name": "27589", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27589"}, {"name": "39244", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/39244"}, {"name": "rhel-mctrans-dos(38357)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38357"}, {"name": "RHSA-2007:0542", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://rhn.redhat.com/errata/RHSA-2007-0542.html"}, {"name": "oval:org.mitre.oval:def:10350", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10350"}, {"name": "26371", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/26371"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2007-4570", "datePublished": "2007-11-10T00:00:00", "dateReserved": "2007-08-28T00:00:00", "dateUpdated": "2024-08-07T15:01:09.888Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:redhat:enterprise_linux:5.0:unkown:server:*:*:*:*:*", "matchCriteriaId": "91C8DBFA-5794-49E3-8B13-6091522C6316", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:mcstrans:0.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "7FE59FCD-3AF6-40DF-A2B7-4282D3190C49", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:redhat:enterprise_linux:5.0:unkown:client:*:*:*:*:*", "matchCriteriaId": "B6A89C94-620B-48A1-B4D1-20EE4941D922", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:mcstrans:0.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "7FE59FCD-3AF6-40DF-A2B7-4282D3190C49", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Algorithmic complexity vulnerability in the MCS translation daemon in mcstrans 0.2.3 allows local users to cause a denial of service (temporary daemon outage) via a large range of compartments in sensitivity labels."}, {"lang": "es", "value": "Vulnerabilidad de complejidad algor\u00edtmica en el demonio de traducci\u00f3n MCS en el mcstrans 0.2.3 permite a usuarios locales provocar una denegaci\u00f3n de servicio (apag\u00f3n temporal del demonio) a trav\u00e9s de un rango largo de compartimientos en las etiquetas sensibles."}], "id": "CVE-2007-4570", "lastModified": "2024-11-21T00:35:55.147", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 1.9, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-11-10T00:46:00.000", "references": [{"source": "secalert@redhat.com", "url": "http://osvdb.org/39244"}, {"source": "secalert@redhat.com", "url": "http://secunia.com/advisories/27589"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/26371"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/attachment.cgi?id=193951"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=288201"}, {"source": "secalert@redhat.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38357"}, {"source": "secalert@redhat.com", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10350"}, {"source": "secalert@redhat.com", "tags": ["Patch"], "url": "https://rhn.redhat.com/errata/RHSA-2007-0542.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/39244"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/27589"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/26371"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.redhat.com/attachment.cgi?id=193951"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=288201"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38357"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10350"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://rhn.redhat.com/errata/RHSA-2007-0542.html"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}