Unrated severityNVD Advisory· Published Aug 7, 2006· Updated Jun 16, 2026

CVE-2006-3123

Description

Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions in cfs_fh.c in cfsd in Matt Blaze Cryptographic File System (CFS) 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service (daemon crash) by appending data to a file that is larger than 2 Gb.

Affected products

Matt Blaze/Cryptographic File System
cpe:2.3:a:matt_blaze:cryptographic_file_system:1.4.1:*:*:*:*:*:*:*
Debian/cfsllm-create
Range: <1.4.1-17

Patches

Vulnerability mechanics

References

www.debian.org/security/2006/dsa-1138nvdPatchVendor Advisory
bugs.debian.org/cgi-bin/bugreport.cginvd
secunia.com/advisories/21310nvd
secunia.com/advisories/21341nvd
www.securityfocus.com/bid/19320nvd
www.vupen.com/english/advisories/2006/3157nvd
exchange.xforce.ibmcloud.com/vulnerabilities/28288nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000