Sysstat Multiple Local Buffer Overflow Vulnerabilities

Bugtraq ID:	10610
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 25 2004 12:00AM
Updated:	Jun 25 2004 12:00AM
Credit:	These vulnerabilities were announced in a vendor advisory.
Vulnerable:	Sysstat Sysstat 5.0.1 Redhat Fedora Core2
Not Vulnerable:

Sysstat Multiple Local Buffer Overflow Vulnerabilities

Sysstat is reported prone to multiple local buffer overflow vulnerabilities. It is reported that these vulnerabilities are not exploitable to execute arbitrary code.

However, although unconfirmed, due to the nature of these vulnerabilities, the issue may be exploitable in order to execute arbitrary code on certain platforms or when certain compilers are used.

Sysstat Multiple Local Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sysstat Multiple Local Buffer Overflow Vulnerabilities

Solution:
Red Hat has released a Fedora advisory (FEDORA-2004-187) and updates. Customers are advised to see the referenced advisory for further details.

Sysstat Multiple Local Buffer Overflow Vulnerabilities

References:

• Sysstat Homepage (Sysstat)