OSVDB ID: 22735

Title: LibAST conf_find_file() Configuration Filename Processing Overflow

Info

Disclosure

Jan 23, 2006

Discovery

Jan 15, 2006

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity

Solution

Upgrade to version 0.7 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Secunia Advisory ID: 18586 18632 18916
CVE ID: 2006-0224 (see also: NVD)
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-01/0404.html
http://archives.neohapsis.com/archives/bugtraq/2006-01/0460.html
Other Advisory URL: http://article.gmane.org/gmane.comp.window-managers.enlightenment.announce/9
http://www.gentoo.org/security/en/glsa/glsa-200601-14.xml
http://www.rosiello.org/en/read_bugs.php?id=25
Vendor Specific Advisory URL: http://www.debian.org/security/2006/dsa-976

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/22735