CVE-2007-3961 Off-by-one error in the fsp_readdir_r function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which pre...
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one error in the fsp_readdir_r function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fsp c library | <= 0.7 | No fix listed |
References
- bugs.gentoo.org
- fsp.cvs.sourceforge.net
- fsp.cvs.sourceforge.net
- 38568 vdb-entry
- 26184 patch third-party-advisory vendor-advisory
- 26378 third-party-advisory
- 27501 third-party-advisory
- GLSA-200711-01 vendor-advisory
- MDVSA-2008:018 vendor-advisory