CVE-2007-5030

Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by (1) the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the (2) TClntMsg, (3) TClntOptIAAddress, (4) TClntOptIAPrefix, (5) TOptVendorSpecInfo, and (6) TOptOptionRequest constructors; and the (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, and (9) TSrvIfaceMgr::decodeRelayForw methods.

• CWE-189

• http://klub.com.pl/dhcpv6/
• http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txtPatch
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.htmlPatch, Vendor Advisory
• http://osvdb.org/40568
• http://secunia.com/advisories/26876Patch, Vendor Advisory
• http://www.securityfocus.com/bid/25726Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36684
• http://klub.com.pl/dhcpv6/
• http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txtPatch
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.htmlPatch, Vendor Advisory
• http://osvdb.org/40568
• http://secunia.com/advisories/26876Patch, Vendor Advisory
• http://www.securityfocus.com/bid/25726Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36684

Published

Sep 21, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-5024EMC VMware Server before 1.0.4 Build 56528 writes passwords …
• CVE-2007-5025Unspecified vulnerability in EMC VMware ACE before 1.0.3 Bui…
• CVE-2007-5026dBlog CMS, probably 2.0, stores sensitive information under …
• CVE-2007-5027Multiple cross-site scripting (XSS) vulnerabilities in cgi-b…
• CVE-2007-5028Dibbler 0.6.0 on Linux uses weak world-writable permissions …
• CVE-2007-5029Dibbler 0.6.0 does not verify that certain length parameters…
• CVE-2007-5031The TSrvOptIA_NA::rebind method in SrvOptions/SrvOptIA_NA.cp…
• CVE-2007-5032Cross-site request forgery (CSRF) vulnerability in admin.php…
• CVE-2007-5033Cross-site scripting (XSS) vulnerability in profile.php in p…
• CVE-2007-5034ELinks before 0.11.3, when sending a POST request for an htt…
• CVE-2007-5035PHP remote file inclusion vulnerability in html/modules/extr…
• CVE-2007-5036Multiple buffer overflows in the AirDefense Airsensor M520 w…