CVE

Id
31508  
CVE No.
CVE-2008-1391  
Status
Candidate  
Description
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.  
Phase
Assigned (20080318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
338110 31508 CVE-2008-1391 SREASONRES:20080325 *BSD libc (strfmon) Multiple vulnerabilities  View
338111 31508 CVE-2008-1391 URL:http://securityreason.com/achievement_securityalert/53  View
338112 31508 CVE-2008-1391 BUGTRAQ:20080327 [securityreason] *BSD libc (strfmon) Multiple vulnerabilities  View
338113 31508 CVE-2008-1391 URL:http://www.securityfocus.com/archive/1/archive/1/490158/100/0/threaded  View
338114 31508 CVE-2008-1391 CONFIRM:http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/stdlib/strfmon.c  View
338115 31508 CVE-2008-1391 CONFIRM:http://support.apple.com/kb/HT3338  View
338116 31508 CVE-2008-1391 APPLE:APPLE-SA-2008-12-15  View
338117 31508 CVE-2008-1391 URL:http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html  View
338118 31508 CVE-2008-1391 DEBIAN:DSA-2058  View
338119 31508 CVE-2008-1391 URL:http://www.debian.org/security/2010/dsa-2058  View
338120 31508 CVE-2008-1391 SUSE:SUSE-SA:2010:052  View
338121 31508 CVE-2008-1391 URL:https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html  View
338122 31508 CVE-2008-1391 CERT:TA08-350A  View
338123 31508 CVE-2008-1391 URL:http://www.us-cert.gov/cas/techalerts/TA08-350A.html  View
338124 31508 CVE-2008-1391 BID:28479  View
338125 31508 CVE-2008-1391 URL:http://www.securityfocus.com/bid/28479  View
338126 31508 CVE-2008-1391 VUPEN:ADV-2008-3444  View
338127 31508 CVE-2008-1391 URL:http://www.vupen.com/english/advisories/2008/3444  View
338128 31508 CVE-2008-1391 SECTRACK:1019722  View
338129 31508 CVE-2008-1391 URL:http://www.securitytracker.com/id?1019722  View
338130 31508 CVE-2008-1391 SECUNIA:29574  View
338131 31508 CVE-2008-1391 URL:http://secunia.com/advisories/29574  View
338132 31508 CVE-2008-1391 SECUNIA:33179  View
338133 31508 CVE-2008-1391 URL:http://secunia.com/advisories/33179  View
338134 31508 CVE-2008-1391 SREASON:3770  View
338135 31508 CVE-2008-1391 URL:http://securityreason.com/securityalert/3770  View
338136 31508 CVE-2008-1391 XF:bsd-strfmon-overflow(41504)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50285 JVNDB-2008-005595 Plone CMS におけるログアウトしたセッションを再利用される脆弱性 Plone CMS は、ユーザの認証状態を記録しない、およびクライアント側で単独ログアウト機能が実装されるため、ログアウトしたセッションを再利用される脆弱性が存在します。 CVE-2008-1395 31508 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005595.html  View