Cryptographic Filesystem Daemon Local Denial Of Service Vulnerability

Bugtraq ID:	19320
Class:	Boundary Condition Error
CVE:	CVE-2006-3123
Remote:	No
Local:	Yes
Published:	Aug 02 2006 12:00AM
Updated:	Aug 03 2006 08:26PM
Credit:	Carlo Contavalli is credited with the discovery of this vulnerability.
Vulnerable:	Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1
Not Vulnerable:

Cryptographic Filesystem Daemon Local Denial Of Service Vulnerability

Cryptographic Filesystem (CFS) is prone to a local denial-of-service vulnerability.

A local attacker may crash the encryption daemon, resulting in denial-of-service conditions to legitimate users.

Cryptographic Filesystem Daemon Local Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Cryptographic Filesystem Daemon Local Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Please see the referenced advisories for third-party updates.

Cryptographic Filesystem Daemon Local Denial Of Service Vulnerability

References:

• CFS Homepage (Matt Blaze)