Path traversal

2009-03-0411:30:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.047 Low

EPSS

Percentile

92.7%

JSON

The aspath_prepend function in rde_attr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers to cause a denial of service (application crash) via an Autonomous System (AS) advertisement containing a long AS path.

CPENameOperatorVersion
openbsdeq4.4
openbsdeq4.3

CPE	Name	Operator	Version
	openbsd	eq	4.4
	openbsd	eq	4.3

References

openbsd.org/errata43.html

openbsd.org/errata44.html

osvdb.org/52271

secunia.com/advisories/33975

www.securityfocus.com/bid/33828

www.securitytracker.com/id?1021736

exchange.xforce.ibmcloud.com/vulnerabilities/48812