CVE-2007-1273: Integer Overflow

Published Mar 10, 2007
·
Updated

Integer overflow in the ktruser function in NetBSD-current before 20061022, NetBSD 3 and 3-0 before 20061024, and NetBSD 2 before 20070209, when the kernel is built with the COMPATFREEBSD or COMPATDARWIN option, allows local users to cause a denial of service and possibly gain privileges.

Affected Software

9 affected components
NetBSD NetBSD=2.0
NetBSD NetBSD=2.0.1
NetBSD NetBSD=2.0.2
NetBSD NetBSD=2.0.3
NetBSD NetBSD=2.0.4
NetBSD NetBSD=2.1
NetBSD NetBSD=3.0.1
NetBSD NetBSD=4.0
Navision Financials Server=3.0

Event History

Mar 10, 2007
CVE Published
08:19 PM
Data Sourced
08:19 PM
DescriptionWeaknessAffected Software
Mar 11, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2007-1273?

CVE-2007-1273 is classified as a moderate severity vulnerability due to the potential for denial of service and privilege escalation.

2

How do I fix CVE-2007-1273?

To fix CVE-2007-1273, update to a patched version of NetBSD that addresses the integer overflow issue.

3

Which versions of NetBSD are affected by CVE-2007-1273?

CVE-2007-1273 affects NetBSD-current before 20061022, NetBSD 3 and 3-0 before 20061024, and NetBSD 2 before 20070209.

4

Can CVE-2007-1273 be exploited remotely?

CVE-2007-1273 can only be exploited by local users, not remotely.

5

What are the potential impacts of CVE-2007-1273?

The potential impacts of CVE-2007-1273 include denial of service and possibly gaining elevated privileges on the system.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203