PT-2009-3190 · Gnu+2 · Du+8

Maksymilian Arciemowicz · Publicado 2009-03-09 · Atualizado 2018-10-11 · CVE-2009-0537

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions OpenBSD versions prior to 4.4 Microsoft Interix version 6.0 build 10.0.6030.0

Description The issue is related to an integer overflow in the fts build function in fts.c in libc, which allows context-dependent attackers to cause a denial of service, resulting in an application crash. This can be triggered via a deep directory tree, related to the fts level structure member. The issue is demonstrated by various commands and applications, including du, rm, chmod, and chgrp on OpenBSD, and SearchIndexer.exe on Vista Enterprise.

Recommendations For OpenBSD versions prior to 4.4, update to a version later than 4.4 to resolve the issue. For Microsoft Interix version 6.0 build 10.0.6030.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2009-0537

Produtos afetados

Interix

Openbsd

Searchindexer.Exe

Vista Enterprise

Chgrp

Chmod

Du

Libc

Rm

Referências · 8

• 🔥 http://securityfocus.com/bid/34008 · Exploit
• 🔥 https://exploit-db.com/exploits/8163 · Exploit
• http://securityfocus.com/archive/1/501505/100/0/threaded · Nota
• http://openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c · Aviso do Fabricante
• http://securitytracker.com/id?1021818 · Nota
• http://securityreason.com/achievement_securityalert/60 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0537 · Nota de Segurança
• http://openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c.diff?r1=1.41%3Br2=1.42%3Bf=h · Nota