2Fax Tab Expansion Buffer Overflow Vulnerability

Bugtraq ID:	11980
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 15 2004 12:00AM
Updated:	Dec 15 2004 12:00AM
Credit:	Discovery is credited to Ariel Berkman.
Vulnerable:	2fax 2fax 3.0 4
Not Vulnerable:	2fax 2fax 3.0 5

2Fax Tab Expansion Buffer Overflow Vulnerability

2fax is prone to a buffer overflow vulnerability. This issue is exposed when the software performs tab expansion operations while converting files. Since files may originate from an external or untrusted source, this issue is considered remote in nature.

Successful exploitation will result in execution of arbitrary code in the context of the user running the application.

2Fax Tab Expansion Buffer Overflow Vulnerability

The following example exploit has been published:

• /data/vulnerabilities/exploits/13.txt.zip

2Fax Tab Expansion Buffer Overflow Vulnerability

Solution:
The vendor has addressed this issue in version 3.05.


2fax 2fax 3.0 4

• 2fax 2fax305.tgz
  http://www.atbas.org/2fax/2fax305.tgz

2Fax Tab Expansion Buffer Overflow Vulnerability

References:

• [remote] [control] 2fax 3.04 expandtabs overflows s buffer ("D. J. Bernstein" )
  
• 2fax Homepage (2fax)
  
• Re: [remote] [control] 2fax 3.04 expandtabs overflows s buffer ("Hans Harder" )