CVE-2023-45284

CVE-2023-45284 concerns Windows path/filepath IsLocal misclassification of reserved device names. In affected builds, names like COM1 (with trailing space) or COM/LPT followed by superscript digits could be incorrectly treated as local, enabling local checks to pass when they should not. The fix ...

CVE-2023-45284 Incorrect detection of reserved device names on Windows in path/filepath

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...

CVE-2023-45284

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...

Google Go Security Vulnerability

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google, Inc. A security vulnerability exists in Google Go that stems from the IsLocal function not properly detecting reserved device names...

CVE-2023-45284: Undefined Security Weakness

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...

GO-2023-2186 Incorrect detection of reserved device names on Windows in path/filepath

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...

Improper Check for Unusual or Exceptional Conditions

Overview std/path/filepath is a Go standard library package std/path/filepath Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions. Go Vulnerability Report:On Windows, The IsLocal function does not correctly detect reserved device names in some...

SUSE CVE-2023-45284

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...

PT-2023-7932

Name of the Vulnerable Software and Affected Versions Go versions 1.21.3 and earlier, 1.20.10 and earlier Description The issue is related to the IsLocal function not correctly detecting reserved device names in some cases on Windows. Specifically, reserved names followed by spaces, such as "COM1...

[Full-Disclosure] iDEFENSE Security Advisory 10.05.04b: Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability

Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability iDEFENSE Security Advisory 10.05.04b: www.idefense.com/application/poi/display?id=147&type=vulnerabilities October 5, 2004 I. BACKGROUND Symantec's Norton AntiVirus protects email, instant messages, and other files by...

iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved Device Name Handling Vulnerability

Sophos Small Business Suite Reserved Device Name Handling Vulnerability iDEFENSE Security Advisory 09.22.04 www.idefense.com/application/poi/display?id=143&type=vulnerabilities September 22, 2004 I. BACKGROUND Sophos Small Business Suite includes the Sophos PureMessage Small Business Edition,...

Microsoft Windows Server 20009598MENT 3.5.xEnterprise Server 4.0Terminal Server 4.0Workstation 4.0 Microsoft DoS Device Name - Denial of Service

Microsoft Windows Server 20009598MENT 3.5.xEnterprise Server 4.0Terminal Server 4.0Workstation 4.0 Microsoft DoS Device Name - Denial of Service Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/95/98/ME/NT 3.5.x/NT Enterprise Server 4.0/NT Terminal Server 4.0/NT...