NetSight
IP …
critical9.3Public exploit code

CVE-2010-1938

Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd.

Affected products

VendorProductAffected versions
FreebsdFreebsd
Versions 6, 6.4, 7.0, 7.0-release, 7.0_beta4, 7.0_releng
NrlOpie
through 2.4.1
Versions 2.2, 2.3, 2.4, 2.10, 2.11

Weakness classification

CWE-189

References