Vulnerability Note VU#100937

Automatic File Content Type Recognition Tool contains memory allocation problem

Overview

A memory allocation problem exists in the "Automatic File Content Type Recognition Tool" versions of the file[1] package prior to 3.41.

I. Description

According to an OpenPKG advisory, a memory allocation problem exists in the "Automatic File Content Type Recognition Tool" (AFCTR tool) versions of the file[1] package prior to 3.41.

II. Impact

The complete impact of this vulnerability is not yet known. This vulnerability may be exploited by a user on the local system.

III. Solution

Upgrade to the version 3.41 of the file[1] package, or apply a patch specified by your vendor.

Systems Affected

Vendor	Status	Date Notified	Date Updated
OpenPKG	Vulnerable	6-Mar-2003
Red Hat Inc.	Vulnerable	7-Mar-2003

References

ftp://ftp.astron.com/pub/files

Credit

Jeff Johnson is credited with discovering this vulnerability in an OpenPKG advisory.

This document was written by Jason A Rafail.

Other Information

Date Public:	2003-03-04
Date First Published:	2003-03-06
Date Last Updated:	2003-03-07
CERT Advisory:
CVE-ID(s):
NVD-ID(s):
US-CERT Technical Alerts:
Severity Metric:	0.00
Document Revision:	6

If you have feedback, comments, or additional information about this vulnerability, please send us email.