{"api_version":"1","generated_at":"2026-07-24T19:48:05+00:00","cve":"CVE-2010-1938","urls":{"html":"https://cve.report/CVE-2010-1938","api":"https://cve.report/api/cve/CVE-2010-1938.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-1938","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-1938"},"summary":{"title":"CVE-2010-1938","description":"Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-05-28 18:30:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-189","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://secunia.com/advisories/45136","name":"http://secunia.com/advisories/45136","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian update for opie - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/39966","name":"http://secunia.com/advisories/39966","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"OPIE \"__opiereadrec()\" Off-by-One and \"opielogin\" Privilege Escalation Vulnerabilities - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-10:05.opie.asc","name":"http://security.FreeBSD.org/advisories/FreeBSD-SA-10:05.opie.asc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://site.pi3.com.pl/adv/libopie-adv.txt","name":"http://site.pi3.com.pl/adv/libopie-adv.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/x-c","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/40403","name":"http://www.securityfocus.com/bid/40403","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"OPIE '__opiereadrec()' Off By One Heap Memory Corruption Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584932","name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584932","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"#584932 - CVE-2010-1938 - Debian Bug report logs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/7450","name":"http://securityreason.com/securityalert/7450","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"libopie __readrec() off-by one (FreeBSD ftpd remote PoC) - SecurityReason.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1025709","name":"http://securitytracker.com/id?1025709","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"OPIE Off-by-One Overflow in 'opielogin' Lets Local Users Gain Elevated Privileges - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://blog.pi3.com.pl/?p=111","name":"http://blog.pi3.com.pl/?p=111","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"OPIE Authentication System off-by-one : pi3 blog","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1024040","name":"http://securitytracker.com/id?1024040","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - OPIE Off-by-One Buffer Overflow Lets Remote Users Deny Service","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2011/dsa-2281","name":"http://www.debian.org/security/2011/dsa-2281","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-2281-1 opie","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/39963","name":"http://secunia.com/advisories/39963","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"FreeBSD OPIE \"__opiereadrec()\" Off-by-One Vulnerability - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/achievement_securityalert/87","name":"http://securityreason.com/achievement_securityalert/87","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"libopie __readrec() off-by one (FreeBSD ftpd remote PoC) ( Research Advisory ) - SecurityReason.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.exploit-db.com/exploits/12762","name":"http://www.exploit-db.com/exploits/12762","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1938","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1938","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"6","cpe7":"stable","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"6.4","cpe7":"release","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"6.4","cpe7":"release_p2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"6.4","cpe7":"release_p3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"6.4","cpe7":"release_p4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"6.4","cpe7":"release_p5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"6.4","cpe7":"stable","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0","cpe7":"beta_4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0","cpe7":"current","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0","cpe7":"pre-release","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0","cpe7":"release","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0","cpe7":"release-p12","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0","cpe7":"release-p8","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0","cpe7":"release-p9","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0","cpe7":"releng","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0","cpe7":"stable","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0-release","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0_beta4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.0_releng","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.1","cpe7":"pre-release","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.1","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.1","cpe7":"release-p1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.1","cpe7":"release-p2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.1","cpe7":"release-p4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.1","cpe7":"release-p5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.1","cpe7":"release-p6","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.1","cpe7":"stable","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.2","cpe7":"pre-release","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.2","cpe7":"stable","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"8.1-prerelease","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nrl","cpe5":"opie","cpe6":"2.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nrl","cpe5":"opie","cpe6":"2.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nrl","cpe5":"opie","cpe6":"2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nrl","cpe5":"opie","cpe6":"2.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nrl","cpe5":"opie","cpe6":"2.22","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nrl","cpe5":"opie","cpe6":"2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nrl","cpe5":"opie","cpe6":"2.32","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nrl","cpe5":"opie","cpe6":"2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1938","vulnerable":"1","versionEndIncluding":"2.4.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nrl","cpe5":"opie","cpe6":"*","cpe7":"test1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T02:17:13.078Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://blog.pi3.com.pl/?p=111"},{"name":"7450","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/7450"},{"name":"40403","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/40403"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://site.pi3.com.pl/adv/libopie-adv.txt"},{"name":"1024040","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1024040"},{"name":"DSA-2281","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2011/dsa-2281"},{"name":"FreeBSD-SA-10:05","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred"],"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-10:05.opie.asc"},{"name":"39966","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/39966"},{"name":"12762","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/12762"},{"name":"20100527 libopie __readrec() off-by one (FreeBSD ftpd remote PoC)","tags":["third-party-advisory","x_refsource_SREASONRES","x_transferred"],"url":"http://securityreason.com/achievement_securityalert/87"},{"name":"1025709","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1025709"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584932"},{"name":"39963","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/39963"},{"name":"45136","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/45136"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-05-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2010-06-18T09:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://blog.pi3.com.pl/?p=111"},{"name":"7450","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/7450"},{"name":"40403","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/40403"},{"tags":["x_refsource_MISC"],"url":"http://site.pi3.com.pl/adv/libopie-adv.txt"},{"name":"1024040","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1024040"},{"name":"DSA-2281","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2011/dsa-2281"},{"name":"FreeBSD-SA-10:05","tags":["vendor-advisory","x_refsource_FREEBSD"],"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-10:05.opie.asc"},{"name":"39966","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/39966"},{"name":"12762","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/12762"},{"name":"20100527 libopie __readrec() off-by one (FreeBSD ftpd remote PoC)","tags":["third-party-advisory","x_refsource_SREASONRES"],"url":"http://securityreason.com/achievement_securityalert/87"},{"name":"1025709","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1025709"},{"tags":["x_refsource_CONFIRM"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584932"},{"name":"39963","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/39963"},{"name":"45136","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/45136"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-1938","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://blog.pi3.com.pl/?p=111","refsource":"MISC","url":"http://blog.pi3.com.pl/?p=111"},{"name":"7450","refsource":"SREASON","url":"http://securityreason.com/securityalert/7450"},{"name":"40403","refsource":"BID","url":"http://www.securityfocus.com/bid/40403"},{"name":"http://site.pi3.com.pl/adv/libopie-adv.txt","refsource":"MISC","url":"http://site.pi3.com.pl/adv/libopie-adv.txt"},{"name":"1024040","refsource":"SECTRACK","url":"http://securitytracker.com/id?1024040"},{"name":"DSA-2281","refsource":"DEBIAN","url":"http://www.debian.org/security/2011/dsa-2281"},{"name":"FreeBSD-SA-10:05","refsource":"FREEBSD","url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-10:05.opie.asc"},{"name":"39966","refsource":"SECUNIA","url":"http://secunia.com/advisories/39966"},{"name":"12762","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/12762"},{"name":"20100527 libopie __readrec() off-by one (FreeBSD ftpd remote PoC)","refsource":"SREASONRES","url":"http://securityreason.com/achievement_securityalert/87"},{"name":"1025709","refsource":"SECTRACK","url":"http://securitytracker.com/id?1025709"},{"name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584932","refsource":"CONFIRM","url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584932"},{"name":"39963","refsource":"SECUNIA","url":"http://secunia.com/advisories/39963"},{"name":"45136","refsource":"SECUNIA","url":"http://secunia.com/advisories/45136"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-1938","datePublished":"2010-05-28T18:00:00.000Z","dateReserved":"2010-05-13T00:00:00.000Z","dateUpdated":"2024-08-07T02:17:13.078Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-05-28 18:30:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-189","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6:stable:*:*:*:*:*:*","matchCriteriaId":"F135D976-52FD-477A-B3C3-9CDDB79ACCBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4F7F02A-C845-40BF-8490-510A070000F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release:*:*:*:*:*:*","matchCriteriaId":"53D1AD5E-4007-4AFA-A18B-69D1AC055C00"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p2:*:*:*:*:*:*","matchCriteriaId":"06BFEE54-DBF3-4546-AE57-2C25FC9F0F04"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p3:*:*:*:*:*:*","matchCriteriaId":"BE1FC1A8-E499-45A0-B89A-5BFA24727DBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*","matchCriteriaId":"8E08DCB9-9064-4DB7-B43A-7B415882EB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p5:*:*:*:*:*:*","matchCriteriaId":"E4A5E6FF-617E-4173-A948-F3728454A012"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*","matchCriteriaId":"06FB0EEA-254E-4A1F-99E7-058FCD518E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:beta_4:*:*:*:*:*:*","matchCriteriaId":"CDFA5AA9-E73F-448D-9754-41AF9AECB93A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:current:*:*:*:*:*:*","matchCriteriaId":"C4E775BA-6DC1-4006-83A4-D30EA57417FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:pre-release:*:*:*:*:*:*","matchCriteriaId":"42231BCC-2B90-4196-A1C2-408A353C1BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:release:*:*:*:*:*:*","matchCriteriaId":"EF8CCA19-1CBF-406F-AF84-00E803423195"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:release-p12:*:*:*:*:*:*","matchCriteriaId":"0452688A-3E71-4BC9-8942-56ABBC47EA87"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:release-p8:*:*:*:*:*:*","matchCriteriaId":"510ABA29-1AAA-4279-BAD2-B4624DC60A11"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:release-p9:*:*:*:*:*:*","matchCriteriaId":"7A6C0249-951F-4352-92B2-E6A6CD5F26FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:releng:*:*:*:*:*:*","matchCriteriaId":"C3556FE9-9949-4B8E-9E51-1205220B1A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:stable:*:*:*:*:*:*","matchCriteriaId":"799D4A5E-7BF1-4B04-89DB-5C929938847B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0-release:*:*:*:*:*:*:*","matchCriteriaId":"EC290462-4364-464F-8CE9-6F5E5BE6F246"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"F06B831E-D8F2-4380-B279-559CE103210F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0_releng:*:*:*:*:*:*:*","matchCriteriaId":"3ACC9072-4A33-4F1F-B790-2F9D5A52F71B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:pre-release:*:*:*:*:*:*","matchCriteriaId":"14D72C9B-EEB0-4605-BEA2-F77092129245"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*","matchCriteriaId":"52DBF406-9C77-4DDA-AB7D-40FAE40023D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p1:*:*:*:*:*:*","matchCriteriaId":"20A31C9A-A928-4C9B-BB49-0E53227746DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p2:*:*:*:*:*:*","matchCriteriaId":"99FB7443-F942-402A-9104-64677EAF014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p4:*:*:*:*:*:*","matchCriteriaId":"305A4C3D-C63D-4D1F-80FF-549182A0D9B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p5:*:*:*:*:*:*","matchCriteriaId":"C2A31704-E99F-4DBE-ABA4-EC3E566DE6CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p6:*:*:*:*:*:*","matchCriteriaId":"E634CDF4-F77B-4917-A452-907A771B5B0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:stable:*:*:*:*:*:*","matchCriteriaId":"E9A75104-5A3E-485E-B4EC-0873C942731C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*","matchCriteriaId":"F948527C-A01E-4315-80B6-47FACE18A34F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*","matchCriteriaId":"8B573401-DC6F-4AFE-92F5-D96F785D2107"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:stable:*:*:*:*:*:*","matchCriteriaId":"60D40129-108B-421B-9990-6C6F381C96AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*","matchCriteriaId":"3CF1F9EF-01AF-4708-AE02-765360AF3D66"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:8.1-prerelease:*:*:*:*:*:*:*","matchCriteriaId":"B525B32B-417E-49C8-9847-A9F807FA67B0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nrl:opie:*:test1:*:*:*:*:*:*","versionEndIncluding":"2.4.1","matchCriteriaId":"AEEC73FC-2BB6-4B8F-9596-BBB287AFFDA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nrl:opie:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9D33B387-8EE6-4F36-A4B5-509FF8DA8C1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nrl:opie:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F9B3734D-F6CB-4242-92FA-EDF425CCBCEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nrl:opie:2.4:*:*:*:*:*:*:*","matchCriteriaId":"E2B076A0-0216-4A52-ABA6-2E511FB6DB5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nrl:opie:2.10:*:*:*:*:*:*:*","matchCriteriaId":"32B7BBAB-609B-4D4D-BF5A-C4E95F0A8C51"},{"vulnerable":true,"criteria":"cpe:2.3:a:nrl:opie:2.11:*:*:*:*:*:*:*","matchCriteriaId":"5889C86D-4285-4B22-B3F0-76984D8CEC4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nrl:opie:2.21:*:*:*:*:*:*:*","matchCriteriaId":"E0779EF0-9638-474E-9EF2-971ADA10F1D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nrl:opie:2.22:*:*:*:*:*:*:*","matchCriteriaId":"5AEB7E9A-3F68-4F20-A073-751A76452C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:nrl:opie:2.32:*:*:*:*:*:*:*","matchCriteriaId":"F9A53F58-7514-4B07-AC56-C6F928F9D3F3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"1938","Ordinal":"1","Title":"CVE-2010-1938","CVE":"CVE-2010-1938","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"1938","Ordinal":"1","NoteData":"Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd.","Type":"Description","Title":"CVE-2010-1938"},{"CveYear":"2010","CveId":"1938","Ordinal":"2","NoteData":"2010-05-28","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"1938","Ordinal":"3","NoteData":"2010-06-18","Type":"Other","Title":"Modified"}]}}}