FreeBSD Fetch Remote Buffer Overflow Vulnerability
BID:11702
Info
FreeBSD Fetch Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 11702 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2004-1053 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 18 2004 12:00AM |
| Updated: | Jul 12 2009 08:06AM |
| Credit: | Colin Percival <[email protected]> disclosed this vulnerability to the vendor. |
| Vulnerable: |
FreeBSD FreeBSD 5.3 FreeBSD FreeBSD 5.2 -RELENG FreeBSD FreeBSD 5.2 FreeBSD FreeBSD 5.1 -RELENG FreeBSD FreeBSD 5.1 FreeBSD FreeBSD 5.0 -RELENG FreeBSD FreeBSD 5.0 FreeBSD FreeBSD 4.10 -RELENG FreeBSD FreeBSD 4.10 FreeBSD FreeBSD 4.9 -RELENG FreeBSD FreeBSD 4.9 FreeBSD FreeBSD 4.8 -RELENG FreeBSD FreeBSD 4.8 FreeBSD FreeBSD 4.7 -RELENG FreeBSD FreeBSD 4.7 FreeBSD fetch |
| Not Vulnerable: | |
Discussion
FreeBSD Fetch Remote Buffer Overflow Vulnerability
A remote buffer overflow vulnerability affects the FreeBSD fetch utility. This issue is due to a failure of the application to carry out sufficient bounds checks during the parsing of certain HTTP response headers resulting in an integer overflow. Further operations on the response body result in the overflowing of process memory.
A malicious server may leverage this issue to execute arbitrary code on an affected computer with the privileges of a user executing the vulnerable client software. This may facilitate unauthorized access or privilege escalation.
A remote buffer overflow vulnerability affects the FreeBSD fetch utility. This issue is due to a failure of the application to carry out sufficient bounds checks during the parsing of certain HTTP response headers resulting in an integer overflow. Further operations on the response body result in the overflowing of process memory.
A malicious server may leverage this issue to execute arbitrary code on an affected computer with the privileges of a user executing the vulnerable client software. This may facilitate unauthorized access or privilege escalation.
Exploit / POC
FreeBSD Fetch Remote Buffer Overflow Vulnerability
Exploit code is reported to exist, but is currently not publicly available.
Exploit code is reported to exist, but is currently not publicly available.
Solution / Fix
FreeBSD Fetch Remote Buffer Overflow Vulnerability
Solution:
FreeBSD has released advisory FreeBSD-SA-04:16 along with fixes dealing with this issue. FreeBSD has advised users to obtain the provided patch and then update their packages with the following commands:
# cd /usr/src
# patch < /path/to/patch
# cd /usr/src/usr.bin/fetch
# make obj && make depend && make && make install
For more information please see the referenced FreeBSD advisory.
FreeBSD fetch
Solution:
FreeBSD has released advisory FreeBSD-SA-04:16 along with fixes dealing with this issue. FreeBSD has advised users to obtain the provided patch and then update their packages with the following commands:
# cd /usr/src
# patch < /path/to/patch
# cd /usr/src/usr.bin/fetch
# make obj && make depend && make && make install
For more information please see the referenced FreeBSD advisory.
FreeBSD fetch
-
FreeBSD fetch.patch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-04:16/fetch.patch -
FreeBSD fetch.patch.asc
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-04:16/fetch.patch.as c