Eazel Nautilus Trash Folder Handler Buffer Overflow Vulnerability
BID:10099
Info
Eazel Nautilus Trash Folder Handler Buffer Overflow Vulnerability
| Bugtraq ID: | 10099 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 12 2004 12:00AM |
| Updated: | Apr 12 2004 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to gsicht gsicht <[email protected]>. |
| Vulnerable: |
Eazel Nautilus 2.2.1 Eazel Nautilus 2.2 Eazel Nautilus 1.0.4 |
| Not Vulnerable: | |
Discussion
Eazel Nautilus Trash Folder Handler Buffer Overflow Vulnerability
Nautilus has been reported to be prone to a buffer overflow vulnerability.
The vulnerability is reported to present itself when Nautilus attempts to delete a malicious directory and that directory is later operated on in the "Trash" folder.
An attacker who has some degree of interactive access to an affected system may attempt to exploit this vulnerability to execute code in the context of the user who is invoking Nautilus file manager.
Nautilus has been reported to be prone to a buffer overflow vulnerability.
The vulnerability is reported to present itself when Nautilus attempts to delete a malicious directory and that directory is later operated on in the "Trash" folder.
An attacker who has some degree of interactive access to an affected system may attempt to exploit this vulnerability to execute code in the context of the user who is invoking Nautilus file manager.
Exploit / POC
Eazel Nautilus Trash Folder Handler Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Eazel Nautilus Trash Folder Handler Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Eazel Nautilus Trash Folder Handler Buffer Overflow Vulnerability
References:
References:
- Gnome nautilus bug (gsicht gsicht