CVE-2008-3916
Published Sep 4, 2008
Last updated 6 years ago
Overview
- Description
- Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-119
Evaluator
- Comment
- http://xforce.iss.net/xforce/xfdb/44643 "GNU ed is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the strip_escapes() function. By persuading a victim to open a specially-crafted file, a remote attacker could overflow a buffer and execute arbitrary code on the system."
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gnu:ed:0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCDDC2AA-D846-4CC3-9A9A-58E9F97DB868"
},
{
"criteria": "cpe:2.3:a:gnu:ed:0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D20E634A-5BAA-4B62-AA57-4C1082AA23C5"
},
{
"criteria": "cpe:2.3:a:gnu:ed:0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCCE07A7-B6F9-44E5-BDBC-D49EB4856D6B"
},
{
"criteria": "cpe:2.3:a:gnu:ed:0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1825BAFA-D696-458D-A992-997AF5EAAA68"
},
{
"criteria": "cpe:2.3:a:gnu:ed:0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAED7141-9F2C-46CD-8F22-8D76271559D7"
},
{
"criteria": "cpe:2.3:a:gnu:ed:0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA2EBF50-0410-40FE-9D1E-B82D77FE100D"
},
{
"criteria": "cpe:2.3:a:gnu:ed:0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DED055D1-3CC7-4A3A-84DE-4AC35D2BA16C"
},
{
"criteria": "cpe:2.3:a:gnu:ed:0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F591660-794F-4FE0-8D57-AC439D482EC7"
}
],
"operator": "OR"
}
]
}
]