PT-2009-3190 · Gnu+2 · Du+8

Maksymilian Arciemowicz · Published 2009-03-09 · Updated 2018-10-11 · CVE-2009-0537

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions OpenBSD versions prior to 4.4 Microsoft Interix version 6.0 build 10.0.6030.0

Description The issue is related to an integer overflow in the fts build function in fts.c in libc, which allows context-dependent attackers to cause a denial of service, resulting in an application crash. This can be triggered via a deep directory tree, related to the fts level structure member. The issue is demonstrated by various commands and applications, including du, rm, chmod, and chgrp on OpenBSD, and SearchIndexer.exe on Vista Enterprise.

Recommendations For OpenBSD versions prior to 4.4, update to a version later than 4.4 to resolve the issue. For Microsoft Interix version 6.0 build 10.0.6030.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2009-0537

Affected Products

Interix

Openbsd

Searchindexer.Exe

Vista Enterprise

Chgrp

Chmod

Du

Libc

Rm

References · 8

• 🔥 http://securityfocus.com/bid/34008 · Exploit
• 🔥 https://exploit-db.com/exploits/8163 · Exploit
• http://openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0537 · Security Note
• http://securityfocus.com/archive/1/501505/100/0/threaded · Note
• http://securitytracker.com/id?1021818 · Note
• http://securityreason.com/achievement_securityalert/60 · Note
• http://openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c.diff?r1=1.41%3Br2=1.42%3Bf=h · Note