BID:10360

GNU LibTASN1 Undisclosed Vulnerability

Info

GNU LibTASN1 Undisclosed Vulnerability

Bugtraq ID:	10360
Class:	Unknown
CVE:	CVE-2004-0401
Remote:	Yes
Local:	Yes
Published:	May 17 2004 12:00AM
Updated:	Jul 12 2009 04:07AM
Credit:	This vulnerability was announced in a Debian backports changelog.
Vulnerable:	GNU Libtasn1 0.2.6 GNU Libtasn1 0.2.5 GNU Libtasn1 0.2.4 GNU Libtasn1 0.2.3 GNU Libtasn1 0.2.2 GNU Libtasn1 0.2.1 GNU Libtasn1 0.2 GNU Libtasn1 0.1.1 GNU Libtasn1 0.1

Not Vulnerable:	GNU Libtasn1 0.2.7 GNU Libtasn1 0.1.2

Discussion

GNU LibTASN1 Undisclosed Vulnerability

GNU Utils Libtasn1 has been reported prone to an undisclosed vulnerability. The issue is reported to present itself in the DER parsing functions of Libtasn1.

This BID will be updated as soon as further information regarding this vulnerability becomes available.

Libtasn1 versions prior to 0.1.2 and 0.2.7 are reported prone to this vulnerability.

Exploit / POC

GNU LibTASN1 Undisclosed Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

GNU LibTASN1 Undisclosed Vulnerability

Solution:
It is reported that the vendor has addressed this issue in versions 0.1.2 and 0.2.7.

GNU Libtasn1 0.1