FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-3534

This CVE name corresponds to:

Entered	Topic
2005-12-22	nbd-server -- buffer overflow vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-3534 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-3534
Phase	Assigned(20051116)

Description

Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.

References

Source	Reference
MISC	http://sourceforge.net/mailarchive/forum.php?thread_id=9201144&forum_id=40388
MISC	http://bugs.gentoo.org/show_bug.cgi?id=116314
CONFIRM	http://sourceforge.net/project/shownotes.php?release_id=380202&group_id=13229
CONFIRM	http://sourceforge.net/project/shownotes.php?release_id=380210&group_id=13229
DEBIAN	DSA-924
GENTOO	GLSA-200512-14
SUSE	SUSE-SR:2006:001
UBUNTU	USN-237-1
BID	16029
OSVDB	21848
SECUNIA	18135
SECUNIA	18171
SECUNIA	18209
SECUNIA	18315
SECUNIA	18503
SECUNIA	43353
SECUNIA	43610