CVE-2009-2407

Heap-based buffer overflow in the parsetag3packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a...

Linux eCryptfs buffer overflow

Buffer overflows on parsetag11packet and parsetag3packet functions...

Linux eCryptfs工具parse_tag_3_packet()函数堆溢出漏洞

BUGTRAQ ID: 35850 eCryptfs是Linux平台下的企业级加密文件系统。 eCryptfs的密钥管理代码中的parsetag3packet函数没有检查tag 3报文所包含的加密密钥大小是否大于ECRYPTFSMAXENCRYPTEDKEYBYTES就将其拷贝到了newauthtok结构中，这可能触发堆溢出漏洞。 fs/ecryptfs/keystore.c -- static int parsetag3packetstruct ecryptfscryptstat cryptstat, unsigned char data, struct listhead...