Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-0537

Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service (application crash) via a deep directory tree, related to the fts_level structure member, as demonstrated by (a) du, (b) rm, (c) chmod, and (d) chgrp on OpenBSD; and (e) SearchIndexer.exe on Vista Enterprise.

Published

2009-03-09T21:30:00.203

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.9 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-189
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft interix 6.0 Yes
Operating System openbsd openbsd ≤ 4.4 Yes
Operating System openbsd openbsd 2.0 Yes
Operating System openbsd openbsd 2.1 Yes
Operating System openbsd openbsd 2.2 Yes
Operating System openbsd openbsd 2.3 Yes
Operating System openbsd openbsd 2.4 Yes
Operating System openbsd openbsd 2.5 Yes
Operating System openbsd openbsd 2.6 Yes
Operating System openbsd openbsd 2.7 Yes
Operating System openbsd openbsd 2.8 Yes
Operating System openbsd openbsd 2.9 Yes
Operating System openbsd openbsd 3.0 Yes
Operating System openbsd openbsd 3.1 Yes
Operating System openbsd openbsd 3.2 Yes
Operating System openbsd openbsd 3.3 Yes
Operating System openbsd openbsd 3.4 Yes
Operating System openbsd openbsd 3.5 Yes
Operating System openbsd openbsd 3.6 Yes
Operating System openbsd openbsd 3.7 Yes
Operating System openbsd openbsd 3.8 Yes
Operating System openbsd openbsd 3.9 Yes
Operating System openbsd openbsd 4.0 Yes
Operating System openbsd openbsd 4.1 Yes
Operating System openbsd openbsd 4.2 Yes
Operating System openbsd openbsd 4.3 Yes
References