[VIM] FreeRADIUS dispute of CVE-2007-0080
Steven M. Christey
coley at mitre.org
Sun Feb 11 02:36:51 EST 2007
Received this via email.
"2007.01.02 - SMB_Handle_Type SMB_Connect_Server. While the summary is
superficially correct, and there is a stack overflow in rlm_smb, the
issue is less problematic than it sounds... In summary, the issue is
not remotely exploitable. It is exploitable by local administrators
who have write access to the server configuration files. If an
attacker can write to the server configuration files, they can
configure the server to run arbitrary programs. Exploiting the server
via a stack overflow would be unnecessary."
The vendor mentions that some VDB's haven't updated their records yet.
More information about the VIM