Description
Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions in cfs_fh.c in cfsd in Matt Blaze Cryptographic File System (CFS) 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service (daemon crash) by appending data to a file that is larger than 2 Gb.
Exploits
No known exploits found for this CVE.
Search Exploit-DBReferences
security@debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=371076security@debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=371076security@debian.org
http://secunia.com/advisories/21310security@debian.org
http://secunia.com/advisories/21341security@debian.org
http://www.debian.org/security/2006/dsa-1138security@debian.org
http://www.securityfocus.com/bid/19320security@debian.org
http://www.vupen.com/english/advisories/2006/3157security@debian.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/28288af854a3a-2127-422b-91ae-364da2661108
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=371076af854a3a-2127-422b-91ae-364da2661108
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=371076af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/21310af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/21341af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2006/dsa-1138af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/19320af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2006/3157af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/28288