cve-2003-1234
Vulnerability from cvelistv5
Published
2005-11-16 07:37
Modified
2024-08-08 02:19
Severity ?
EPSS score ?
Summary
Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathconf and (2) lseek, which do not properly decrement f_count through a call to fdrop.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-08T02:19:45.920Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://www.pine.nl/press/pine-cert-20030101.txt" }, { "name": "20030106 PDS: Integer overflow in FreeBSD kernel", "tags": [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred" ], "url": "http://www.securityfocus.com/archive/1/305308/30/26420/threaded" }, { "name": "20030106 PDS: Integer overflow in FreeBSD kernel", "tags": [ "mailing-list", "x_refsource_VULNWATCH", "x_transferred" ], "url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0006.html" }, { "name": "FreeBSD-SA-02:44", "tags": [ "vendor-advisory", "x_refsource_FREEBSD", "x_transferred" ], "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:44.filedesc.asc" }, { "name": "20030107 FreeBSD Security Advisory FreeBSD-SA-02:44.filedesc", "tags": [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred" ], "url": "http://archives.neohapsis.com/archives/bugtraq/2003-01/0057.html" }, { "name": "6524", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/6524" }, { "name": "1005898", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id?1005898" }, { "name": "freebsd-kernel-integer-overflow(10993)", "tags": [ "vdb-entry", "x_refsource_XF", "x_transferred" ], "url": "http://www.iss.net/security_center/static/10993.php" }, { "name": "7821", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/7821" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2003-01-06T00:00:00", "descriptions": [ { "lang": "en", "value": "Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathconf and (2) lseek, which do not properly decrement f_count through a call to fdrop." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-10-19T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "http://www.pine.nl/press/pine-cert-20030101.txt" }, { "name": "20030106 PDS: Integer overflow in FreeBSD kernel", "tags": [ "mailing-list", "x_refsource_BUGTRAQ" ], "url": "http://www.securityfocus.com/archive/1/305308/30/26420/threaded" }, { "name": "20030106 PDS: Integer overflow in FreeBSD kernel", "tags": [ "mailing-list", "x_refsource_VULNWATCH" ], "url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0006.html" }, { "name": "FreeBSD-SA-02:44", "tags": [ "vendor-advisory", "x_refsource_FREEBSD" ], "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:44.filedesc.asc" }, { "name": "20030107 FreeBSD Security Advisory FreeBSD-SA-02:44.filedesc", "tags": [ "mailing-list", "x_refsource_BUGTRAQ" ], "url": "http://archives.neohapsis.com/archives/bugtraq/2003-01/0057.html" }, { "name": "6524", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/6524" }, { "name": "1005898", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id?1005898" }, { "name": "freebsd-kernel-integer-overflow(10993)", "tags": [ "vdb-entry", "x_refsource_XF" ], "url": "http://www.iss.net/security_center/static/10993.php" }, { "name": "7821", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/7821" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2003-1234", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathconf and (2) lseek, which do not properly decrement f_count through a call to fdrop." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "http://www.pine.nl/press/pine-cert-20030101.txt", "refsource": "MISC", "url": "http://www.pine.nl/press/pine-cert-20030101.txt" }, { "name": "20030106 PDS: Integer overflow in FreeBSD kernel", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/305308/30/26420/threaded" }, { "name": "20030106 PDS: Integer overflow in FreeBSD kernel", "refsource": "VULNWATCH", "url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0006.html" }, { "name": "FreeBSD-SA-02:44", "refsource": "FREEBSD", "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:44.filedesc.asc" }, { "name": "20030107 FreeBSD Security Advisory FreeBSD-SA-02:44.filedesc", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2003-01/0057.html" }, { "name": "6524", "refsource": "BID", "url": "http://www.securityfocus.com/bid/6524" }, { "name": "1005898", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1005898" }, { "name": "freebsd-kernel-integer-overflow(10993)", "refsource": "XF", "url": "http://www.iss.net/security_center/static/10993.php" }, { "name": "7821", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/7821" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2003-1234", "datePublished": "2005-11-16T07:37:00", "dateReserved": "2005-11-16T00:00:00", "dateUpdated": "2024-08-08T02:19:45.920Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2003-1234\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2003-12-31T05:00:00.000\",\"lastModified\":\"2025-04-03T01:03:51.193\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathconf and (2) lseek, which do not properly decrement f_count through a call to fdrop.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:N/I:P/A:P\",\"baseScore\":3.6,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":3.9,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C496B665-70DA-4B98-A5D1-E2935C0CE840\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27C9E23D-AB82-4AE1-873E-C5493BB96AA1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4054D69F-596F-4EB4-BE9A-E2478343F55A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA26ABBE-9973-45FA-9E9B-82170B751219\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7891202C-62AF-4590-9E5F-3514FDA2B38E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF4F7002-A525-4A66-BE8B-E50ABBF144B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF8F9B2F-E898-4F87-A245-32A41748587B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"183667CA-6DF1-4BFB-AE32-9ABF55B7283A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.2:current:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE799983-DF99-428E-B560-321680C85A75\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1156954-25AD-45BE-AE49-9705ECD5BDA2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EBDDEC3F-52EB-4E1E-84C4-B472600059EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"314BA420-4C74-4060-8ACE-D7A7C041CF2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EAD7613-A5B3-4621-B981-290C7C6B8BA0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8ED84E66-CFD9-4DF8-9679-13457D340D54\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"263F3734-7076-4EA8-B4C0-F37CFC4E979E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0419DD66-FF66-48BC-AD3B-F6AFD0551E36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B982342C-1981-4C55-8044-AFE4D87623DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"47E02BE6-4800-4940-B269-385B66AC5077\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:*\",\"matchCriteriaId\":\"0361EA35-FBD7-4E8F-8625-C8100ED7BB7C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF49BF03-C25E-4737-84D5-892895C86C58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2019E0E-426B-43AF-8904-1B811AE171E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*\",\"matchCriteriaId\":\"9062BAB5-D437-49BE-A384-39F62434B70B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"55C5FC1A-1253-4390-A4FC-573BB14EA937\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44308D13-D935-4FF8-AB52-F0E115ED1AD2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D41CB12-7894-4D25-80EC-23C56171D973\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C001822-FDF8-497C-AC2C-B59A00E9ACD2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*\",\"matchCriteriaId\":\"118211EF-CED7-4EB5-9669-F54C8169D4AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B86C77AB-B8FF-4376-9B4E-C88417396F3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5612FB0-8403-4A7E-B89A-D7BDFAC00078\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6288144-0CD7-45B6-B5A7-09B1DF14FBE8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FFD9D1C-A459-47AD-BC62-15631417A32F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*\",\"matchCriteriaId\":\"4ECDEC87-0132-46B6-BD9B-A94F9B669EAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E21E50A-A368-4487-A791-87366CC5C86E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*\",\"matchCriteriaId\":\"43E84296-9B5C-4623-A2C4-431D76FC2765\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"582B9BF3-5BF1-44A3-A580-62F2D44FDD34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E18328E2-3CB5-4D36-8EA3-77DD909B46A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF73D76B-FBB8-4D10-8393-9FAF53392A4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*\",\"matchCriteriaId\":\"F177AE1C-58C2-4575-807C-ABFFC5119FA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7\"}]}]}],\"references\":[{\"url\":\"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:44.filedesc.asc\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2003-01/0057.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0006.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/7821\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.iss.net/security_center/static/10993.php\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.pine.nl/press/pine-cert-20030101.txt\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/archive/1/305308/30/26420/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/6524\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.securitytracker.com/id?1005898\",\"source\":\"cve@mitre.org\"},{\"url\":\"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:44.filedesc.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2003-01/0057.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0006.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/7821\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.iss.net/security_center/static/10993.php\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.pine.nl/press/pine-cert-20030101.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/305308/30/26420/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/6524\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.securitytracker.com/id?1005898\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.