Beveiligingsadvies

CVE-2003-1234

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-11-16 07:37:00
Laatst bijgewerkt 2024-08-08 02:19:45
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathconf and (2) lseek, which do not properly decrement f_count through a call to fdrop.