[UNIX] MPG123 Local Buffer Overflow Vulnerability (Command Line)
From: support@securiteam.comDate: 02/17/02
- Previous message: support@securiteam.com: "[EXPL] SiteNews Remote Add User"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: support@securiteam.com To: list@securiteam.com Date: Sun, 17 Feb 2002 10:46:57 +0100 (CET)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
When was the last time you checked your server's security?
How about a monthly report?
http://www.AutomatedScanning.com - Know that you're safe.
- - - - - - - - -
MPG123 Local Buffer Overflow Vulnerability (Command Line)
------------------------------------------------------------------------
SUMMARY
<http://www.mpg123.de/> mpg123 is a real time MPEG Audio Player for Layer
1, 2 and Layer3. A security vulnerability in the product allows local
attackers to cause the MPG123 to core dump. Since the program might be
lunched by third party programs, elevated privileges gaining might occur.
DETAILS
Vulnerable systems:
MPG123 version 0.59s and prior
Immune systems:
MPG123 version 0.59s
Example:
Issuing the following command gets the program to core dump:
# mpg123 `perl -e 'print "A" x 10000'`
Vendor status:
Since the program is not setuid or setgid, no immediate threat takes
place, but since this program might be lunched by third part programs, a
fix has been posted in to the program's CVS.
ADDITIONAL INFORMATION
The information has been provided by <mailto:hoserhead@woot.net> Joe
Drew.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
- Previous message: support@securiteam.com: "[EXPL] SiteNews Remote Add User"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
