CVE-2008-3916
- State
- Published
- Severity
- Not scored
- Published
- Sep 4, 2008
- Updated
- Aug 7, 2024
- Reserved
- Sep 4, 2008
Description
Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 43068third-party-advisory
- ADV-2008-3347vdb-entry
- oval:org.mitre.oval:def:10678vdb-entrysignature
- RHSA-2008:0946vendor-advisory
- ADV-2011-0212vdb-entry
- 38794third-party-advisory
- [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updatesmailing-list
- 30815vdb-entry
- FEDORA-2008-9263vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-461.htm
- gnued-stripescapes-bo(44643)vdb-entry
- ADV-2008-2642vdb-entry
- FEDORA-2008-9236vendor-advisory
- [bug-ed] 20080821 Version 1.0 of GNU ed releasedmailing-list
- MDVSA-2008:200vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0003.html
- 33005third-party-advisory
- SUSE-SR:2011:002vendor-advisory
- 1020734vdb-entry
- 20090227 VMSA-2009-0003 ESX 2.5.5 patch 12 updates service console package edmailing-list
- 32349third-party-advisory
- GLSA-200809-15vendor-advisory
- 32460third-party-advisory
- ADV-2010-0528vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.