CVE-2009-5029

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2013-05-02T14:00:00.000Z"}, "references": [{"name": "[libc-alpha] 20111215 integer overflow to heap overrun exploit in glibc", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://sourceware.org/ml/libc-alpha/2011-12/msg00037.html"}, {"tags": ["x_refsource_MISC"], "url": "http://dividead.wordpress.com/2009/06/01/glibc-timezone-integer-overflow/"}, {"tags": ["x_refsource_MISC"], "url": "http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=97ac2654b2d831acaa18a2b018b0736245903fd2"}, {"name": "20111203 VSFTPD Remote Heap Overrun (low severity)", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2011-December/084452.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=761245"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T07:24:53.791Z"}, "title": "CVE Program Container", "references": [{"name": "[libc-alpha] 20111215 integer overflow to heap overrun exploit in glibc", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://sourceware.org/ml/libc-alpha/2011-12/msg00037.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://dividead.wordpress.com/2009/06/01/glibc-timezone-integer-overflow/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=97ac2654b2d831acaa18a2b018b0736245903fd2"}, {"name": "20111203 VSFTPD Remote Heap Overrun (low severity)", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2011-December/084452.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=761245"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2009-5029", "state": "PUBLISHED", "dateReserved": "2010-12-09T00:00:00.000Z", "datePublished": "2013-05-02T14:00:00.000Z", "dateUpdated": "2024-08-07T07:24:53.791Z"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "secalert@redhat.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*", "matchCriteriaId": "78E4362C-F0B7-482C-AABD-F34E35ABCE85", "versionEndIncluding": "2.14", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "E5C0577C-6BC7-418F-B2C5-B74800D43418", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "FEA795F7-8AAC-42BA-971B-601346704BD8", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "5CADA314-C0D0-40F8-9019-884F17D0B54A", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "255E0C0D-0B70-4C10-BF7C-34193AA24C42", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "F424F2F5-D7E4-4A13-A8CF-32D466610BDF", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "6DC4E7AE-BDC4-48F1-9FDE-3F3FAA3F40F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "F1329215-C53A-40D5-8E9C-F457D092E483", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "4E2A0F12-FD00-40B9-86AD-7D082385E5DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "8ED8F0E8-A969-4F7F-A100-662F4A5426FD", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.1.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "9416576F-A605-45BE-AA01-FEF357A66979", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "AE582B8F-4E31-4D0F-B2F9-AC83C855F751", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "DB56D9C9-13B3-418C-B06C-0997E165F1C7", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.1.9:*:*:*:*:*:*:*", "matchCriteriaId": "19D5667D-5EA4-4B44-BF8A-9C10506BD4E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnu:glibc:2.13:*:*:*:*:*:*:*", "matchCriteriaId": "DF8E0DCD-8D39-4C89-9B4C-37025D9BE3A9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd."}, {"lang": "es", "value": "Desbordamiento de entero en la funci\u00f3n __tzfile_read en glibc anterior a v2.15 que permite a atacantes dependientes del contexto causar una denegaci\u00f3n de servicios (ca\u00edda) y posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de un fichero timezone (TZ), como se demostr\u00f3 usando vsftpd."}], "id": "CVE-2009-5029", "lastModified": "2026-06-16T23:14:51.563", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2013-05-02T14:55:01.380", "references": [{"source": "secalert@redhat.com", "tags": ["Exploit"], "url": "http://dividead.wordpress.com/2009/06/01/glibc-timezone-integer-overflow/"}, {"source": "secalert@redhat.com", "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2011-December/084452.html"}, {"source": "secalert@redhat.com", "url": "http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=97ac2654b2d831acaa18a2b018b0736245903fd2"}, {"source": "secalert@redhat.com", "tags": ["Exploit"], "url": "http://sourceware.org/ml/libc-alpha/2011-12/msg00037.html"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=761245"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://dividead.wordpress.com/2009/06/01/glibc-timezone-integer-overflow/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2011-December/084452.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=97ac2654b2d831acaa18a2b018b0736245903fd2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://sourceware.org/ml/libc-alpha/2011-12/msg00037.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=761245"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2012:0125", "cpe": "cpe:/o:redhat:enterprise_linux:4", "package": "glibc-0:2.3.4-2.57", "product_name": "Red Hat Enterprise Linux 4", "release_date": "2012-02-13T00:00:00Z"}, {"advisory": "RHSA-2012:0126", "cpe": "cpe:/o:redhat:enterprise_linux:5", "package": "glibc-0:2.5-65.el5_7.3", "product_name": "Red Hat Enterprise Linux 5", "release_date": "2012-02-13T00:00:00Z"}, {"advisory": "RHSA-2012:0058", "cpe": "cpe:/o:redhat:enterprise_linux:6", "package": "glibc-0:2.12-1.47.el6_2.5", "product_name": "Red Hat Enterprise Linux 6", "release_date": "2012-01-24T00:00:00Z"}], "bugzilla": {"description": "glibc: __tzfile_read integer overflow to buffer overflow", "id": "761245", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=761245"}, "csaw": false, "cvss": {"cvss_base_score": "6.5", "cvss_scoring_vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "status": "verified"}, "cwe": "CWE-190", "details": ["Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd."], "name": "CVE-2009-5029", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:3", "fix_state": "Affected", "package_name": "compat-glibc", "product_name": "Red Hat Enterprise Linux 3"}, {"cpe": "cpe:/o:redhat:enterprise_linux:3", "fix_state": "Affected", "package_name": "glibc", "product_name": "Red Hat Enterprise Linux 3"}, {"cpe": "cpe:/o:redhat:enterprise_linux:4", "fix_state": "Affected", "package_name": "compat-glibc", "product_name": "Red Hat Enterprise Linux 4"}, {"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Affected", "package_name": "compat-glibc", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Affected", "package_name": "compat-glibc", "product_name": "Red Hat Enterprise Linux 6"}], "public_date": "2009-06-01T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2009-5029\nhttps://nvd.nist.gov/vuln/detail/CVE-2009-5029"], "threat_severity": "Moderate"}

{}