Ultrix DXTerm Setup Parameter Local Buffer Overflow Vulnerability
BID:12049
Info
Ultrix DXTerm Setup Parameter Local Buffer Overflow Vulnerability
| Bugtraq ID: | 12049 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 20 2004 12:00AM |
| Updated: | Dec 20 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Kristoffer Br?nemyr <[email protected]>. |
| Vulnerable: |
Ultrix dxterm |
| Not Vulnerable: | |
Discussion
Ultrix DXTerm Setup Parameter Local Buffer Overflow Vulnerability
Ultrix dxterm is reported to be prone to a buffer overflow vulnerability. The issue presents itself when dxterm handles a superfluous 'setup' command line argument.
Because variables that are crucial to controlling program execution flow for dxterm are stored adjacent to the affected buffer, an attacker may corrupt these values and influence dxterm program execution flow into attacker-controlled memory.
Ultrix dxterm is reported to be prone to a buffer overflow vulnerability. The issue presents itself when dxterm handles a superfluous 'setup' command line argument.
Because variables that are crucial to controlling program execution flow for dxterm are stored adjacent to the affected buffer, an attacker may corrupt these values and influence dxterm program execution flow into attacker-controlled memory.
Exploit / POC
Ultrix DXTerm Setup Parameter Local Buffer Overflow Vulnerability
The following exploit is available:
The following exploit is available:
Solution / Fix
Ultrix DXTerm Setup Parameter Local Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Ultrix DXTerm Setup Parameter Local Buffer Overflow Vulnerability
References:
References:
- Exploit for Ultrix 4.5 dxterm (Kristoffer Br?nemyr