Isoqlog Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	10433
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 29 2004 12:00AM
Updated:	May 29 2004 12:00AM
Credit:	Discovery is credited to Nicolas Francois and the vendor.
Vulnerable:	Enderunix Isoqlog 2.2 beta Enderunix Isoqlog 2.1.1
Not Vulnerable:	Enderunix Isoqlog 2.2

Isoqlog Multiple Buffer Overflow Vulnerabilities

Isoqlog is prone to multiple buffer overflow vulnerabilities that span various source files and functions. Some of the vulnerabilities are remotely exploitable and may permit execution of arbitrary code in the context of the process. Others are local in nature, but as the software is not typically installed setuid/setgid, should not present any security risk.

Isoqlog Multiple Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Isoqlog Multiple Buffer Overflow Vulnerabilities

Solution:
This issue has been addressed in Isoqlog 2.2.


Enderunix Isoqlog 2.1.1

• Enderunix isoqlog-2.2.tar.gz
  http://www.enderunix.org/isoqlog/isoqlog-2.2.tar.gz

Enderunix Isoqlog 2.2 beta

• Enderunix isoqlog-2.2.tar.gz
  http://www.enderunix.org/isoqlog/isoqlog-2.2.tar.gz

Isoqlog Multiple Buffer Overflow Vulnerabilities

References:

• Isoqlog Homepage (Enderunix)
  
• EnderUNIX Security Anouncement (Isoqlog and Spamguard) (Murat Balaban )