Description
Multiple stack-based buffer overflows in Command EXEC in Cisco IOS allow local users to gain privileges via unspecified vectors, aka (1) PSIRT-0474975756 and (2) PSIRT-0388256465. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
References (3)
Core 3
Core References
Various Sources x_refsource_misc
http://www.irmplc.com/index.php/111-Vendor-Alerts
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/45360
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/45361
Scores
EPSS
0.0036
EPSS Percentile
27.8%
Details
CWE
CWE-119
Status
published
Products (1)
cisco/ios
Published
Oct 18, 2007
Tracked Since
Feb 18, 2026