Isoqlog Buffer Overflows May Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1010292 |
|
SecurityTracker URL: http://securitytracker.com/id/1010292
|
|
CVE Reference:
GENERIC-MAP-NOMATCH
(Links to External Site)
|
Updated: May 30 2004
|
Original Entry Date: May 26 2004
|
Impact:
Execution of arbitrary code via local system, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 2.2-BETA
|
Description:
Some buffer overflow vulnerabilities were reported in Isoqlog. A remote user may be able to execute arbitrary code on the target system.
Virulent at siyahsapka.org reported that the readSendmailLogFile() function in 'parser.c' contains a buffer overflow. A local user can create a specially crafted log file entry so that when a target user runs Isoqlog, the buffer overflow is triggered and arbitrary code executed on the target system with the privileges of the target user.
The vendor reports that there are additional buffer overflows that may be exploitable by a remote user.
According to the vendor, the parseQmailFromBytesLine(), parseQmailToRemoteLine(), parseQmailToLocalLine(), parseSendmailFromBytesLine(), parseSendmailToLine(), parseEximFromBytesLine(), and parseEximToLine() functions in 'parser.c' contain remotely exploitable buffer overflows.
Also, the 'loadconfig.c' file reportedly contains buffer overflows in the loadconfig() and removespaces() functions.
The vendor also notes that the loadLang() function in 'LangCfg.c' contains some buffer overflows.
Some functions in the 'Html.c' file do not perform bounds checking, the vendor said.
The vendor also indicated that 'Dir.c' contains some locally exploitable buffer overflows.
|
Impact:
A remote user may be able to execute arbitrary code on the target system.
|
Solution:
The vendor has released a fixed version (2.2), available at:
http://www.enderunix.org/isoqlog/isoqlog-2.2.tar.gz
|
Vendor URL: www.enderunix.org/isoqlog/ (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
Linux (Any), UNIX (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
|
|
[Original Message Not Available for Viewing]
|
|
