CVE-2008-3916 Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since...
HighCVSS 9.3
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU ed | = 0.2 | No fix listed |
| GNU ed | = 0.3 | No fix listed |
| GNU ed | = 0.4 | No fix listed |
| GNU ed | = 0.5 | No fix listed |
| GNU ed | = 0.6 | No fix listed |
| GNU ed | = 0.7 | No fix listed |
| GNU ed | = 0.8 | No fix listed |
| GNU ed | = 0.9 | No fix listed |
| debian/ed(Debian:12) | < 0.7-2 | 0.7-2 |
| debian/ed(Debian:13) | < 0.7-2 | 0.7-2 |
| debian/ed(Debian:14) | < 0.7-2 | 0.7-2 |
References
- [bug-ed] 20080821 Version 1.0 of GNU ed released mailing-list
- SUSE-SR:2011:002 vendor-advisory
- [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates mailing-list
- 32349 third-party-advisory
- 32460 third-party-advisory
- 33005 third-party-advisory
- 38794 third-party-advisory
- 43068 third-party-advisory
- GLSA-200809-15 vendor-advisory
- support.avaya.com
- MDVSA-2008:200 vendor-advisory
- RHSA-2008:0946 vendor-advisory
- 20090227 VMSA-2009-0003 ESX 2.5.5 patch 12 updates service console package ed mailing-list
- 30815 vdb-entry
- 1020734 vdb-entry
- www.vmware.com
- ADV-2008-2642 vdb-entry
- ADV-2008-3347 vdb-entry
- ADV-2010-0528 vdb-entry
- ADV-2011-0212 vdb-entry
- gnued-stripescapes-bo(44643) vdb-entry
- oval:org.mitre.oval:def:10678 signature vdb-entry
- FEDORA-2008-9236 vendor-advisory
- FEDORA-2008-9263 vendor-advisory
- Debian Security Tracker CVE-2008-3916 vendor-advisory