wmcdplay Buffer Overflow Vulnerability
BID:1047
Info
wmcdplay Buffer Overflow Vulnerability
| Bugtraq ID: | 1047 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 11 2000 12:00AM |
| Updated: | Mar 11 2000 12:00AM |
| Credit: | First posted to Bugtraq by krahmer <[email protected]> on March 11, 2000. |
| Vulnerable: |
Sam Hawker wmcdplay 1.0 beta1-2 |
| Not Vulnerable: | |
Discussion
wmcdplay Buffer Overflow Vulnerability
wmcdplay is cdplayer generally used with the WindowMaker X11 window-manager on unix systems. While wmcdplay is rarely installed at all by default, when it is installed it is typically set setuid root. wmcdplay is vulnerable to a buffer overflow attack due to lack of bounds checking on an argument it is passed. As a result, a local user can elevate their priviliges to root through overruning the stack and executing arbitrary code with the effective user-id of the process (root).
wmcdplay is cdplayer generally used with the WindowMaker X11 window-manager on unix systems. While wmcdplay is rarely installed at all by default, when it is installed it is typically set setuid root. wmcdplay is vulnerable to a buffer overflow attack due to lack of bounds checking on an argument it is passed. As a result, a local user can elevate their priviliges to root through overruning the stack and executing arbitrary code with the effective user-id of the process (root).
Exploit / POC
wmcdplay Buffer Overflow Vulnerability
x
x
Solution / Fix
wmcdplay Buffer Overflow Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].