File::ExtAttr Extended File Attribute Off-By-One Buffer Overflow Vulnerability

Bugtraq ID:	16118
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 02 2006 12:00AM
Updated:	Jan 02 2006 12:00AM
Credit:	This issue was reported by the vendor.
Vulnerable:	File::ExtAttr File::ExtAttr 0.2 File::ExtAttr File::ExtAttr 0.1
Not Vulnerable:	File::ExtAttr File::ExtAttr 0.3

File::ExtAttr Extended File Attribute Off-By-One Buffer Overflow Vulnerability

File::ExtAttr is prone to an off-by-one buffer overflow vulnerability. This issue may occur when the module is used to read extended file attributes of untrusted files.

Exploitation of the issue could potentially result in a denial of service in the module or may allow for execution of arbitrary code.

File::ExtAttr Extended File Attribute Off-By-One Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

File::ExtAttr Extended File Attribute Off-By-One Buffer Overflow Vulnerability

Solution:
The vendor has released a new version to address this issue.


File::ExtAttr File::ExtAttr 0.1

• File::ExtAttr File::ExtAttr 0.03
  http://sourceforge.net/project/showfiles.php?group_id=153116&package_i d=169603&release_id=382199

File::ExtAttr File::ExtAttr 0.2

• File::ExtAttr File::ExtAttr 0.03
  http://sourceforge.net/project/showfiles.php?group_id=153116&package_i d=169603&release_id=382199

File::ExtAttr Extended File Attribute Off-By-One Buffer Overflow Vulnerability

References:

• File::ExtAttr Changelog (File::ExtAttr)
  
• File::ExtAttr Homepage (File::ExtAttr)