CVE - CVE-2005-4784

CVE-ID
CVE-2005-4784	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple buffer overflows in the POSIX readdir_r function, as used in multiple packages, allow local users to cause a denial of service and possibly execute arbitrary code via (1) a symlink attack that exploits a race condition between opendir and pathcon calls and changes the filesystem to one with a larger maximum directory-entry name length, or (2) possibly via programmer-introduced errors on operating systems with a small struct dirent, such as Solaris or BeOS, as demonstrated in packages including (a) gcj, (b) KDE, (c) libwww, (d) the Rudiments library, (e) teTeX, (f) xmail, (g) bfbtester, (h) ncftp, (i) netwib, (j) OpenOffice.org, (k) Pike, (l) reprepro, (m) Tcl, and (n) xgsmlib.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:15259 URL:http://www.securityfocus.com/bid/15259 BUGTRAQ:20051101 readdir_r considered harmful URL:http://www.securityfocus.com/archive/1/415781 BUGTRAQ:20051105 Re: readdir_r considered harmful URL:http://www.securityfocus.com/archive/1/415790/30/0/threaded BUGTRAQ:20051105 Re: readdir_r considered harmful URL:http://www.securityfocus.com/archive/1/415995/30/0/threaded BUGTRAQ:20051106 Re: readdir_r considered harmful URL:http://www.securityfocus.com/archive/1/415998/30/0/threaded BUGTRAQ:20051106 Re: readdir_r considered harmful URL:http://www.securityfocus.com/archive/1/415999/30/0/threaded BUGTRAQ:20051106 Re: readdir_r considered harmful URL:http://www.securityfocus.com/archive/1/416002/30/0/threaded BUGTRAQ:20051108 Re: readdir_r considered harmful URL:http://www.securityfocus.com/archive/1/416048/30/0/threaded MISC:http://womble.decadentplace.org.uk/readdir_r-advisory.html
Assigning CNA
MITRE Corporation
Date Record Created
20060413	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060413)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)