FreeBSD : cscope -- multiple buffer overflows (c14aa48c-5ab7-11de-bc9b-0030843d3802)

high Nessus Plugin ID 39428

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

Secunia reports :

Some vulnerabilities have been reported in Cscope, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to various boundary errors, which can be exploited to cause buffer overflows when parsing specially crafted files or directories.

Solution

Update the affected package.

See Also

http://www.nessus.org/u?9607343c

Plugin Details

Severity: High

ID: 39428

File Name: freebsd_pkg_c14aa48c5ab711debc9b0030843d3802.nasl

Version: 1.13

Type: local

Published: 6/17/2009

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:cscope, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Exploit Ease: No known exploits are available

Patch Publication Date: 6/16/2009

Vulnerability Publication Date: 5/31/2009

Reference Information

CVE: CVE-2009-0148

BID: 34805

CWE: 119

Secunia: 34978