← Back

CVE-2010-1938

nvd nist
Published: May 28, 2010Modified: Apr 29, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd.

Affected (44)

Products: Freebsd: Freebsd · Nrl: Opie
Freebsd
1 product
Freebsd
Nrl
1 product
Opie
Configuration A
35 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Freebsd
Version 6.4
Freebsd
Version 6.4 release
Freebsd
Version 6.4 release_p2
Freebsd
Version 6.4 release_p3
Freebsd
Version 6.4 release_p4
Freebsd
Version 6.4 release_p5
Freebsd
Version 6.4 stable
Freebsd
Version 6 stable
Freebsd
Version 7.0-release
Freebsd
Version 7.0
Freebsd
Version 7.0 beta_4
Freebsd
Version 7.0 current
Freebsd
Version 7.0 pre-release
Freebsd
Version 7.0 release-p12
Freebsd
Version 7.0 release-p8
Freebsd
Version 7.0 release-p9
Freebsd
Version 7.0 release
Freebsd
Version 7.0 releng
Freebsd
Version 7.0 stable
Freebsd
Version 7.0_beta4
Freebsd
Version 7.0_releng
Freebsd
Version 7.1
Freebsd
Version 7.1 pre-release
Freebsd
Version 7.1 rc1
Freebsd
Version 7.1 release-p1
Freebsd
Version 7.1 release-p2
Freebsd
Version 7.1 release-p4
Freebsd
Version 7.1 release-p5
Freebsd
Version 7.1 release-p6
Freebsd
Version 7.1 stable
Freebsd
Version 7.2
Freebsd
Version 7.2 pre-release
Freebsd
Version 7.2 stable
Freebsd
Version 8.0
Freebsd
Version 8.1-prerelease
Configuration B
9 vulnerable
Vulnerable SoftwareAffected Versions
Nrl
Opie
Up to 2.4.1
Opie
Version 2.10
Opie
Version 2.11
Opie
Version 2.21
Opie
Version 2.22
Opie
Version 2.2
Opie
Version 2.32
Opie
Version 2.3
Opie
Version 2.4

Related CWEs

CWE-189
CWE-189

References (28)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.