Lucene search

K
freebsdFreeBSD7CA2A709-103B-11DC-8E82-00001CD613F9
HistoryMay 30, 2007 - 12:00 a.m.

findutils -- GNU locate heap buffer overrun

2007-05-3000:00:00
vuxml.freebsd.org
11

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

EPSS

0.007

Percentile

79.5%

James Youngman reports:

When GNU locate reads filenames from an old-format locate database,
they are read into a fixed-length buffer allocated on the heap.
Filenames longer than the 1026-byte buffer can cause a buffer
overrun. The overrunning data can be chosen by any person able to
control the names of filenames created on the local system. This
will normally include all local users, but in many cases also remote
users (for example in the case of FTP servers allowing uploads).

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfindutils< 4.2.31UNKNOWN

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

EPSS

0.007

Percentile

79.5%