National Cyber-Alert System

Vulnerability Summary for CVE-2008-3916

Overview

Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.

Description

http://xforce.iss.net/xforce/xfdb/44643 "GNU ed is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the strip_escapes() function. By persuading a victim to open a specially-crafted file, a remote attacker could overflow a buffer and execute arbitrary code on the system."

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2008-9263

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00873.html

External Source: FEDORA

Name: FEDORA-2008-9236

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00847.html

External Source: XF

Name: gnued-stripescapes-bo(44643)

Hyperlink:http://xforce.iss.net/xforce/xfdb/44643

External Source: VUPEN

Name: ADV-2008-3347

Hyperlink:http://www.vupen.com/english/advisories/2008/3347

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2009-0003.html

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2009-0003.html

External Source: SECTRACK

Name: 1020734

Hyperlink:http://www.securitytracker.com/id?1020734

External Source: BID

Name: 30815

Hyperlink:http://www.securityfocus.com/bid/30815

External Source: BUGTRAQ

Name: 20090227 VMSA-2009-0003 ESX 2.5.5 patch 12 updates service console package ed

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/501298/100/0/threaded

External Source: REDHAT

Name: RHSA-2008:0946

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0946.html

External Source: MANDRIVA

Name: MDVSA-2008:200

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:200

External Source: VUPEN

Name: ADV-2008-2642

Hyperlink:http://www.frsirt.com/english/advisories/2008/2642

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2008-461.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2008-461.htm

External Source: GENTOO

Name: GLSA-200809-15

Hyperlink:http://security.gentoo.org/glsa/glsa-200809-15.xml

External Source: SECUNIA

Name: 33005

Hyperlink:http://secunia.com/advisories/33005

External Source: SECUNIA

Name: 32460

Hyperlink:http://secunia.com/advisories/32460

External Source: SECUNIA

Name: 32349

Hyperlink:http://secunia.com/advisories/32349

External Source: MLIST

Name: [bug-ed] 20080821 Version 1.0 of GNU ed released

Hyperlink:http://lists.gnu.org/archive/html/bug-ed/2008-08/msg00000.html