CVE-2007-3961

Off-by-one error in the fspreaddirr function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added...

CVE-2007-3962

Multiple stack-based buffer overflows in fsplib.c in fsplib before 0.9 might allow remote attackers to execute arbitrary code via 1 a long filename that is not properly handled by the fspreaddirnative function when MAXNAMLEN is greater than 255, or 2 a long dname directory dirent field in the...

CVE-2007-3961

Off-by-one error in the fspreaddirr function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added...

CVE-2006-7221

Multiple off-by-one errors in fsplib.c in fsplib before 0.8 allow attackers to cause a denial of service via unspecified vectors involving the 1 name and 2 dname entry attributes...

CVE-2006-7221

Multiple off-by-one errors in fsplib.c in fsplib before 0.8 allow attackers to cause a denial of service via unspecified vectors involving the 1 name and 2 dname entry attributes...

CVE-2007-3961

CVE-2007-3961 , described as an off-by-one error in fsplib’s fsp_readdir_r (fsplib.c) in fsplib before 0.9, can allow remote denial of service when a directory entry length equals MAXNAMELEN, because a terminating null byte may not be added. The vulnerability is tied to the fsplib library used in...

CVE-2006-7221

Multiple off-by-one errors in fsplib.c in fsplib before 0.8 allow attackers to cause a denial of service via unspecified vectors involving the 1 name and 2 dname entry attributes...

CVE-2006-7221

Multiple off-by-one errors in fsplib.c in fsplib before 0.8 allow attackers to cause a denial of service via unspecified vectors involving the 1 name and 2 dname entry attributes...

CVE-2006-7221

CVE-2006-7221 involves multiple off-by-one errors in fsplib.c in the fsplib project, affecting versions before 0.8. The vulnerability allows attackers to cause a denial of service via unspecified vectors related to the (1) name and (2) d_name entry attributes. The connected documents confirm the ...

CVE-2007-3962

CVE-2007-3962 concerns the fsplib library (fsplib.c) with two boundary errors in fsplib before 0.9 that could allow remote code execution via: (1) a long filename not handled by fsp_readdir_native when MAXNAMLEN > 255, and (2) a long dirent field in fsp_readdir. Connected advisories (Mandriva ...

CVE-2007-3961

Off-by-one error in the fspreaddirr function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added...

fsplib -- multiple vulnerabilities

A Secunia Advisory reports: fsplib can be exploited to compromise an application using the library. A boundary error exists in the processing of file names in fspreaddirnative, which can be exploited to cause a stack-based buffer overflow if the defined MAXNAMLEN is bigger than 256. A boundary...