Citadel/UX Network Data Logging Remote Format String Vulnerability
BID:11885
Info
Citadel/UX Network Data Logging Remote Format String Vulnerability
| Bugtraq ID: | 11885 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 13 2004 12:00AM |
| Updated: | Dec 13 2004 12:00AM |
| Credit: | Discovery of this issue is credited to CoKi <[email protected]>. |
| Vulnerable: |
Citadel/UX Citadel/UX 6.27 Citadel/UX Citadel/UX 6.26 Citadel/UX Citadel/UX 6.24 Citadel/UX Citadel/UX 6.23 Citadel/UX Citadel/UX 6.0 8 Citadel/UX Citadel/UX 6.0 7 |
| Not Vulnerable: | |
Discussion
Citadel/UX Network Data Logging Remote Format String Vulnerability
A remote format string vulnerability reportedly affects the network data logging functionality of Citadel/UX. This issue is due to a failure of the application to properly sanitize user-supplied input prior to passing it as the format specifier to a formatted printing function.
A remote attacker may leverage this issue to write to arbitrary process memory, facilitating code execution. Any code execution would take place with superuser privileges.
A remote format string vulnerability reportedly affects the network data logging functionality of Citadel/UX. This issue is due to a failure of the application to properly sanitize user-supplied input prior to passing it as the format specifier to a formatted printing function.
A remote attacker may leverage this issue to write to arbitrary process memory, facilitating code execution. Any code execution would take place with superuser privileges.
Exploit / POC
Citadel/UX Network Data Logging Remote Format String Vulnerability
The following remote shell exploit has been provided:
The following remote shell exploit has been provided:
Solution / Fix
Citadel/UX Network Data Logging Remote Format String Vulnerability
Solution:
It has been reported that this issue has been corrected in the current CVS version of the affected software. It has also been reported that the CVS version of the software should not be used on production systems, as it may be unstable. This will be updated when an official patch is released.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
It has been reported that this issue has been corrected in the current CVS version of the affected software. It has also been reported that the CVS version of the software should not be used on production systems, as it may be unstable. This will be updated when an official patch is released.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Citadel/UX Network Data Logging Remote Format String Vulnerability
References:
References:
- Citadel/UX Homepage (Citadel/UX)
- Citadel/UX <= v6.27 Remote Format String Vulnerability (CoKi
- Re: Citadel/UX <= v6.27 Remote Format String Vulnerability (Michael Hampton