Immunix StackGuard Canary Corruption Handler Evasion Vulnerability
BID:10535
Info
Immunix StackGuard Canary Corruption Handler Evasion Vulnerability
| Bugtraq ID: | 10535 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jun 14 2004 12:00AM |
| Updated: | Jun 14 2004 12:00AM |
| Credit: | Disclosure of this issue is credited to Secure Network Operations. |
| Vulnerable: |
Immunix Immunix OS 7.0 |
| Not Vulnerable: | |
Discussion
Immunix StackGuard Canary Corruption Handler Evasion Vulnerability
Immunix StackGuard is affected by a canary corruption handler evasion vulnerability. this issue is due to a design error that allows an attacker to influence the execution flow of the canary corruption handling function.
This issue may allow an attacker to bypass the security features of StackGuard and allow an attacker to manipulate the execution flow of the canary corruption handling function. It has been speculated that this issue will allow for code execution, although this has not been verified.
This issue reportedly affects Immunix OS version 7.0, however it is likely that other versions are affected as well.
Immunix StackGuard is affected by a canary corruption handler evasion vulnerability. this issue is due to a design error that allows an attacker to influence the execution flow of the canary corruption handling function.
This issue may allow an attacker to bypass the security features of StackGuard and allow an attacker to manipulate the execution flow of the canary corruption handling function. It has been speculated that this issue will allow for code execution, although this has not been verified.
This issue reportedly affects Immunix OS version 7.0, however it is likely that other versions are affected as well.
Exploit / POC
Immunix StackGuard Canary Corruption Handler Evasion Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Immunix StackGuard Canary Corruption Handler Evasion Vulnerability
Solution:
It has been reported that the vendor has released a patch dealing with this issue. Customers are advised to contact the vendor for more information and details on obtaining the patch.
Solution:
It has been reported that the vendor has released a patch dealing with this issue. Customers are advised to contact the vendor for more information and details on obtaining the patch.
References
Immunix StackGuard Canary Corruption Handler Evasion Vulnerability
References:
References:
- Immunix OS HomePage (Immunix)