Vulnerability in Freebsd

CVE-2010-1938

Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd.

EPSS: 0.219 (97.4th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 6, 7.0, 7.2
  • Nrl Opie — versions 2.21, 2.2, 2.11
  • N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2010-1938?
CVE-2010-1938 is a vulnerability in Freebsd, classified under CWE-189. Published 2010-05-28.
Is CVE-2010-1938 known to be exploited?
3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.