← Vulnerability feed

Vulnerability record · CVE-2007-3961 · published 25 July 2007

CVE-2007-3961: Fsp c library vulnerability

Fsp · C Library

Off-by-one error in the fsp_readdir_r function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added.

5.0 CVSS 2.0 Medium EPSS 2.1% · top 19.3%
5.0CVSS 2.0 base score
2.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Off-by-one error in the fsp_readdir_r function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://bugs.gentoo.org/show_bug.cgi?id=188252
http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17&view=markup
http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.19&r2=1.20
http://osvdb.org/38568
http://secunia.com/advisories/26184 PatchVendor Advisory
http://secunia.com/advisories/26378
http://secunia.com/advisories/27501
http://security.gentoo.org/glsa/glsa-200711-01.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:018
http://bugs.gentoo.org/show_bug.cgi?id=188252
http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17&view=markup
http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.19&r2=1.20
http://osvdb.org/38568
http://secunia.com/advisories/26184 PatchVendor Advisory
http://secunia.com/advisories/26378
http://secunia.com/advisories/27501
http://security.gentoo.org/glsa/glsa-200711-01.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:018

Track CVE-2007-3961 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2006-7221Fsp c library memory buffer overflow vulnerabilityMultiple off-by-one errors in fsplib.c in fsplib before 0.8 allow attackers to cause a denial of service via unspecified vectors involving the (1) na…EPSS 1.0%7.5CVE-2007-3962Fsp c library memory buffer overflow vulnerabilityMultiple stack-based buffer overflows in fsplib.c in fsplib before 0.9 might allow remote attackers to execute arbitrary code via (1) a long filename…EPSS 5.2%

Source: NIST National Vulnerability Database (record CVE-2007-3961), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.