PT-2007-5182 · Fsplib · Fsplib

Published 2007-07-25 · Updated 2008-11-15 · CVE-2007-3962

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: fsplib versions prior to 0.9

Description: The issue is related to multiple stack-based buffer overflows in the fsplib.c file. These overflows can occur in two scenarios: (1) when handling a long filename with the fsp readdir native function, especially when MAXNAMLEN is greater than 255, and (2) when processing a long d name directory field in the fsp readdir function. This could potentially allow remote attackers to execute arbitrary code.

Recommendations: For fsplib versions prior to 0.9, update to version 0.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the fsp readdir native and fsp readdir functions until a patch is available. Avoid using long filenames and directory names in the affected functions to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-3962

Affected Products

Fsplib

References · 13

• http://secunia.com/advisories/26184 · Vendor Advisory
• http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.17&r2=1.18 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-3962 · Security Note
• http://security.gentoo.org/glsa/glsa-200711-01.xml · Vendor Advisory
• http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.21&r2=1.22 · Patch
• http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17&view=markup · Patch
• http://securityfocus.com/bid/25034 · Patch
• http://mandriva.com/security/advisories?name=MDVSA-2008:018 · Vendor Advisory
• http://osvdb.org/38570 · Note
• http://bugs.gentoo.org/show_bug.cgi?id=188252 · Note
• http://osvdb.org/38569 · Note
• http://secunia.com/advisories/26378 · Note
• http://secunia.com/advisories/27501 · Note