Lucene search

K
freebsdFreeBSD99B5CFA5-D3D2-11D9-8FFB-00061BC2AD93
HistoryJan 20, 2005 - 12:00 a.m.

yamt -- buffer overflow and directory traversal issues

2005-01-2000:00:00
vuxml.freebsd.org
6

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

69.9%

Stanislav Brabec discovered errors in yamt’s path name
handling that lead to buffer overflows and directory traversal
issues. When processing a file with a maliciously crafted ID3
tag, yamt might overwrite arbitrary files or possibly execute
arbitrary code.
The SuSE package ChangeLog contains:

Several security fixes (#49337):
directory traversal in rename
directory traversal in sort
buffer overflow in sort
buffer overflow in rename

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchyamt< 0.5_2UNKNOWN

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

69.9%

Related for 99B5CFA5-D3D2-11D9-8FFB-00061BC2AD93