Unrated severityNVD Advisory· Published Mar 9, 2009· Updated Jun 16, 2026
CVE-2009-0537
CVE-2009-0537
Description
Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service (application crash) via a deep directory tree, related to the fts_level structure member, as demonstrated by (a) du, (b) rm, (c) chmod, and (d) chgrp on OpenBSD; and (e) SearchIndexer.exe on Vista Enterprise.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
28cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*+ 25 more
- cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*range: <=4.4
- cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:3.7:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:openbsd:openbsd:4.3:*:*:*:*:*:*:*
- (no CPE)range: <=4.4
Patches
Vulnerability mechanics
References
7- www.securityfocus.com/bid/34008nvdExploit
- www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.cnvdVendor Advisory
- securityreason.com/achievement_securityalert/60nvd
- www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c.diffnvd
- www.securityfocus.com/archive/1/501505/100/0/threadednvd
- www.securitytracker.com/idnvd
- www.exploit-db.com/exploits/8163nvd
News mentions
0No linked articles in our index yet.