CVE-2007-1677: Navision Software Navision Financials Server

Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0_BETA2, and NetBSD-current before 20070329, allow local users to execute arbitrary code via long parameters to certain functions, as demonstrated by a long sockaddr structure argument to the clnp_route function.

Affected products

• Navision Software Navision Financials Server: version 3.0 only
• Netbsd Netbsd: version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 3.0.1 only; version 3.0.2 only; …

Published 2007-03-30. Last modified 2026-06-16.