Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2012-08-27T23:00:00
Updated: 2024-08-06T20:05:12.514Z
Reserved: 2012-06-14T00:00:00
Link: CVE-2012-3410
Vulnrichment
No data.
NVD
Status : Modified
Published: 2012-08-27T23:55:01.947
Modified: 2024-11-21T01:40:48.923
Link: CVE-2012-3410
Redhat