CVE-2007-0475
Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local...
Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.
Exploit likelihood
What each source reports
NVD Score used
4.4
Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.
- Record
CVE-2007-0475- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.
- Record
CVE-2007-0475- Updated
- 2026-11-02
EUVDEUVD-2007-0473 No score
Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.
- Record
EUVD-2007-0473- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-37jj-mf3j-h43w No score
Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local...
Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.
- Record
GHSA-37jj-mf3j-h43w- Updated
- 2026-11-02
OSV No score
Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.
- Record
CVE-2007-0475- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-0475 No score
Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.
- Record
DEBIAN-CVE-2007-0475- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0475 is a medium vulnerability (CVSS 4.4) in Smb4k, published February 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in smb4k 0.8.1-1.
References
secunia.com/advisories/23984
lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html
lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html
developer.berlios.de/bugs?func=detailbug&bug_id=9631&group_id=769
developer.berlios.de/project/shownotes.php?release_id=9777
securityfocus.com/bid/22299
Show 11 moreShow less
secunia.com/advisories/24111
secunia.com/advisories/24469
vupen.com/english/advisories/2007/0393
gentoo.org/security/en/glsa/glsa-200703-09.xml
secunia.com/advisories/23937
developer.berlios.de/project/shownotes.php?release_id=11902
developer.berlios.de/project/shownotes.php?release_id=11706
mandriva.com/security/advisories?name=MDKSA-2007:042
nvd.nist.gov/vuln/detail/CVE-2007-0475
github.com/advisories/GHSA-37jj-mf3j-h43w
security-tracker.debian.org/tracker/CVE-2007-0475