PT-2011-1704 · Openbsd+3 · Openbsd+3

Maksymilian Arciemowicz · Published 2011-03-02 · Updated 2011-09-21 · CVE-2010-4754

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD versions 7.3 through 8.1 NetBSD version 5.0.2 OpenBSD version 4.7 Apple Mac OS X versions prior to 10.6.8

Description The issue allows remote authenticated users to cause a denial of service, consuming CPU and memory resources, via crafted glob expressions that do not match any pathnames. This can be demonstrated by using glob expressions in STAT commands to an FTP daemon.

Recommendations For FreeBSD versions 7.3 through 8.1, consider restricting access to the glob implementation until a patch is available. For NetBSD version 5.0.2, avoid using crafted glob expressions in STAT commands to an FTP daemon. For OpenBSD version 4.7, restrict access to the glob implementation to minimize the risk of exploitation. For Apple Mac OS X versions prior to 10.6.8, update to version 10.6.8 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-4754

Affected Products

Freebsd

Macos X

Netbsd

Openbsd

References · 10

• 🔥 http://securityreason.com/exploitalert/9223 · Exploit
• 🔥 http://securityreason.com/achievement_securityalert/89 · Exploit
• 🔥 http://cxib.net/stuff/glob-0day.c · Exploit
• http://cvsweb.netbsd.org/cgi-bin/cvsweb.cgi/src/lib/libc/gen/glob.3#rev1.30.12.1 · Patch
• http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2010-008.txt.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4754 · Security Note
• http://cvsweb.netbsd.org/cgi-bin/cvsweb.cgi/src/lib/libc/gen/glob.c#rev1.18.10.1 · Patch
• http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html · Vendor Advisory
• http://support.apple.com/kb/HT4723 · Note
• http://securityreason.com/securityalert/8116 · Note