PT-2007-5181 · Fsplib · Fsplib

Publicado 2007-07-25 · Atualizado 2008-11-15 · CVE-2007-3961

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: fsplib versions prior to 0.9

Description: The issue is caused by an off-by-one error in the fsp readdir r function, which can lead to a denial of service when encountering a directory entry with a length of exactly MAXNAMELEN, preventing a terminating null byte from being added.

Recommendations: For versions prior to 0.9, update to version 0.9 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-3961

Produtos afetados

Fsplib

Referências · 10

• http://secunia.com/advisories/26184 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-3961 · Nota de Segurança
• http://osvdb.org/38568 · Nota
• http://security.gentoo.org/glsa/glsa-200711-01.xml · Aviso do Fabricante
• http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.19&r2=1.20 · Nota
• http://bugs.gentoo.org/show_bug.cgi?id=188252 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2008:018 · Aviso do Fabricante
• http://secunia.com/advisories/26378 · Nota
• http://secunia.com/advisories/27501 · Nota
• http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17&view=markup · Nota