Isoqlog Buffer Overflows May Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1010292
|
|
SecurityTracker URL: http://securitytracker.com/id?1010292
|
|
CVE Reference: GENERIC-MAP-NOMATCH
(Links to External Site)
|
Updated: May 30 2004
|
Original Entry Date: May 26 2004
|
Impact: Execution of arbitrary code via local system, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): 2.2-BETA
|
Description: Some buffer overflow vulnerabilities were reported in Isoqlog. A remote user may be able to execute arbitrary code on the target system.
Virulent at siyahsapka.org reported that the readSendmailLogFile() function in 'parser.c' contains a buffer overflow. A local user
can create a specially crafted log file entry so that when a target user runs Isoqlog, the buffer overflow is triggered and arbitrary
code executed on the target system with the privileges of the target user.
The vendor reports that there are additional buffer
overflows that may be exploitable by a remote user.
According to the vendor, the parseQmailFromBytesLine(), parseQmailToRemoteLine(),
parseQmailToLocalLine(), parseSendmailFromBytesLine(), parseSendmailToLine(), parseEximFromBytesLine(), and parseEximToLine() functions
in 'parser.c' contain remotely exploitable buffer overflows.
Also, the 'loadconfig.c' file reportedly contains buffer overflows
in the loadconfig() and removespaces() functions.
The vendor also notes that the loadLang() function in 'LangCfg.c' contains
some buffer overflows.
Some functions in the 'Html.c' file do not perform bounds checking, the vendor said.
The vendor also
indicated that 'Dir.c' contains some locally exploitable buffer overflows.
|
Impact: A remote user may be able to execute arbitrary code on the target system.
|
Solution: The vendor has released a fixed version (2.2), available at:
http://www.enderunix.org/isoqlog/isoqlog-2.2.tar.gz
|
Vendor URL: www.enderunix.org/isoqlog/ (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Linux (Any), UNIX (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
|
|
[Original Message Not Available for Viewing]
|
|
