Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-3123
HistoryAug 07, 2006 - 12:00 a.m.

CVE-2006-3123

2006-08-0700:00:00
ubuntu.com
ubuntu.com
7

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

9.0%

Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions
in cfs_fh.c in cfsd in Matt Blaze Cryptographic File System (CFS) 1.4.1
before Debian GNU/Linux package 1.4.1-17 allow local users to cause a
denial of service (daemon crash) by appending data to a file that is larger
than 2 Gb.

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchcfs< 1.4.1-18UNKNOWN
ubuntu8.04noarchcfs< 1.4.1-18UNKNOWN
ubuntu8.10noarchcfs< 1.4.1-18UNKNOWN
ubuntu9.04noarchcfs< 1.4.1-18UNKNOWN
ubuntu9.10noarchcfs< 1.4.1-18UNKNOWN

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

9.0%