VULNERABILITY INTELLIGENCE
CVE-2006-3123
CVSS score2.1 LOW
EPSS probability0.36%
CISA KEVNot currently listed
Published2006-08-07
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:P
Description
Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions in cfs_fh.c in cfsd in Matt Blaze Cryptographic File System (CFS) 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service (daemon crash) by appending data to a file that is larger than 2 Gb.