CWE-193: Off-by-one Error
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
Also known as off-by-five.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- pythonOff-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2...5.0 Medium
- wiresharkOff-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through...7.5 High
- apache http server, debian linux, redhat enterprise linux desktop +2 more +4 moreOff-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache...5.0 Medium
- proftpdOff-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows...7.8 High
- wftpd pro server project pro serverWFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to...5.5 Medium
- gaim project gaimMultiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and...9.8 Critical
- hadrons xfsttOff-by-one error in certain versions of xfstt allows remote attackers to read potentially...7.5 High
- wuftpd wu-ftpd, apple mac os x, mac os x server +5 more +7 moreOff-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may...9.8 Critical
- linux-nfs nfs-utilsOff-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before...9.8 Critical
- etherealMultiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to...9.8 Critical
- redshift atphttpdOff-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier...9.8 Critical
- microsoft internet information servicesOff-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers...7.5 High
- pldaniels altermimeOff-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of...7.5 High
- distrotech cvsOff-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local...7.8 High
- modssl mod sslOff-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command...7.8 High
- openbsd openssh, conectiva linux, engardelinux secure linux +5 more +7 moreOff-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote...9.8 Critical
- acme thttpdOff-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows...9.8 Critical
- infodrom cfingerdFormat string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to...9.8 Critical
- linux kernelOff-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify...5.5 Medium
- ncftp ncftpd serverOff-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of...7.5 High