490
Reference Description
CVE-2001-1496 Off-by-one buffer overflow in server allows remote attackers to cause a denial
of service and possibly execute arbitrary code.
https://www.cve.org/CVERecord?id=CVE-2001-1496
CVE-2004-0342 This is an interesting example that might not be an off-by-one.
https://www.cve.org/CVERecord?id=CVE-2004-0342
CVE-2001-0609 An off-by-one enables a terminating null to be overwritten, which causes 2
strings to be merged and enable a format string.
https://www.cve.org/CVERecord?id=CVE-2001-0609
CVE-2002-1745 Off-by-one error allows source code disclosure of files with 4 letter extensions
that match an accepted 3-letter extension.
https://www.cve.org/CVERecord?id=CVE-2002-1745
CVE-2002-1816 Off-by-one buffer overflow.
https://www.cve.org/CVERecord?id=CVE-2002-1816
CVE-2002-1721 Off-by-one error causes an snprintf call to overwrite a critical internal variable
with a null value.
https://www.cve.org/CVERecord?id=CVE-2002-1721
CVE-2003-0466 Off-by-one error in function used in many products leads to a buffer overflow
during pathname management, as demonstrated using multiple commands in
an FTP server.
https://www.cve.org/CVERecord?id=CVE-2003-0466
CVE-2003-0625 Off-by-one error allows read of sensitive memory via a malformed request.
https://www.cve.org/CVERecord?id=CVE-2003-0625
CVE-2006-4574 Chain: security monitoring product has an off-by-one error that leads to
unexpected length values, triggering an assertion.
https://www.cve.org/CVERecord?id=CVE-2006-4574
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 741 CERT C Secure Coding Standard (2008) Chapter 8 -
Characters and Strings (STR)
734 2344
MemberOf 875 CERT C++ Secure Coding Section 07 - Characters and
Strings (STR)
868 2376
MemberOf 884 CWE Cross-section 884 2567
MemberOf 977 SFP Secondary Cluster: Design 888 2407
MemberOf 1408 Comprehensive Categorization: Incorrect Calculation 1400 2534
Notes
Relationship
This is not always a buffer overflow. For example, an off-by-one error could be a factor in a
partial comparison, a read from the wrong memory location, an incorrect conditional, etc.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Off-by-one Error
CERT C Secure Coding STR31-C Guarantee that storage for strings has
sufficient space for character data and
the null terminator
References
CWE Version 4.14
CWE-194: Unexpected Sign Extension
CWE-194: Unexpected Sign Extension