cbcvebase.
CVE-2009-0537
published 2009-03-09

CVE-2009-0537: Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows…

PriorityP420medium4.9CVSS 2.0
AVLACLAuNCNINAC
EXPLOIT
EPSS
3.59%
88.0th percentile
Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service (application crash) via a deep directory tree, related to the fts_level structure member, as demonstrated by (a) du, (b) rm, (c) chmod, and (d) chgrp on OpenBSD; and (e) SearchIndexer.exe on Vista Enterprise.

Affected

27 ranges· showing 25
VendorProductVersion rangeFixed in
debianglibc——
microsoftinterix——
openbsdopenbsd<= 4.4—
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——
openbsdopenbsd——

CVSS provenance

nvdv2.04.9MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C
vendor_debian4.9LOW
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.