Secunia

A vulnerability has been identified in FreeBSD, which potentially can be exploited by malicious people to cause a DoS (Denial of Service) on a vulnerable system or compromise it.

The vulnerability is caused due to an off-by-one error in the "realpath()" function. This may be exploited via an application using the vulnerable function by specifying a path where the resolved path length is exactly 1024 characters long.

The vulnerability is reported to affect all releases of FreeBSD up to and including 4.8-RELEASE and 5.0-RELEASE, and 4-STABLE prior to May 22 17:11:44 2003 UTC.

NOTE: Reportedly, the applications "lukemftpd" and "sftp_server" are vulnerable. However, other applications may also be affected (see the original advisory for a list of applications using the vulnerable function).

Solution
Apply patch:
Further details available in Customer Area

Provided and/or discovered by
Janusz Niewiadomski and Wojciech Purczynski (iSEC Security Research)

Original Advisory
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:08.realpath.asc

Deep Links
Links available in Customer Area