NVD

Id
3778  
Name
CVE-2008-3916  
Description
Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-04  
Modified Date
2011-03-07  
Seq
2008-3916  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23950 3778 CVE-2008-3916 [bug-ed] 20080821 Version 1.0 of GNU ed released  View
23951 3778 CVE-2008-3916 SUSE-SR:2011:002  View
23952 3778 CVE-2008-3916 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates  View
23953 3778 CVE-2008-3916 oval:org.mitre.oval:def:10678  View
23954 3778 CVE-2008-3916 GLSA-200809-15  View
23955 3778 CVE-2008-3916 http://support.avaya.com/elmodocs2/security/ASA-2008-461.htm  View
23956 3778 CVE-2008-3916 MDVSA-2008:200  View
23957 3778 CVE-2008-3916 RHSA-2008:0946  View
23958 3778 CVE-2008-3916 20090227 VMSA-2009-0003 ESX 2.5.5 patch 12 updates service console package ed  View
23959 3778 CVE-2008-3916 30815  View
23960 3778 CVE-2008-3916 1020734  View
23961 3778 CVE-2008-3916 http://www.vmware.com/security/advisories/VMSA-2009-0003.html  View
23962 3778 CVE-2008-3916 ADV-2008-2642  View
23963 3778 CVE-2008-3916 ADV-2008-3347  View
23964 3778 CVE-2008-3916 ADV-2010-0528  View
23965 3778 CVE-2008-3916 ADV-2011-0212  View
23966 3778 CVE-2008-3916 gnued-stripescapes-bo(44643)  View
23967 3778 CVE-2008-3916 FEDORA-2008-9236  View
23968 3778 CVE-2008-3916 FEDORA-2008-9263  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46577 JVNDB-2008-001887 GNU ed の strip_escapes 関数におけるヒープベースのバッファオーバーフローの脆弱性 GNU ed の signal.c における strip_escapes 関数には、ファイル名の処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-3916 34029 CVE-2008-3916 3778 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001887.html 2008-10-20 2008-11-25 View