CVE-2009-0537

MEDIUM 4.9CVE-2009-0537 · Published 09/03/2009 · updated 16/06/2026

In short

CVE-2009-0537 is a MEDIUM (CVSS 4.9) vulnerability affecting interix (microsoft).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
interix microsoft	`= 6.0`	No fix yet

Description

Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service (application crash) via a deep directory tree, related to the fts_level structure member, as demonstrated by (a) du, (b) rm, (c) chmod, and (d) chgrp on OpenBSD; and (e) SearchIndexer.exe on Vista Enterprise.

References

More vulnerabilities in interix

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free