BID:12807

RXVT-Unicode Escape Sequence Remote Buffer Overflow Vulnerability

Info

RXVT-Unicode Escape Sequence Remote Buffer Overflow Vulnerability

Bugtraq ID:	12807
Class:	Boundary Condition Error
CVE:	CVE-2005-0764
Remote:	Yes
Local:	No
Published:	Mar 15 2005 12:00AM
Updated:	Jul 12 2009 10:56AM
Credit:	The individual or individuals responsible for the discovery of this issue are currently unknown; the vendor disclosed this issue.
Vulnerable:	Marc Lehmann RXVT-Unicode 5.2 Marc Lehmann RXVT-Unicode 5.1 Marc Lehmann RXVT-Unicode 5.0 Marc Lehmann RXVT-Unicode 4.9 Marc Lehmann RXVT-Unicode 4.8 Marc Lehmann RXVT-Unicode 4.7 Marc Lehmann RXVT-Unicode 4.6 Marc Lehmann RXVT-Unicode 4.5 Marc Lehmann RXVT-Unicode 4.4 Marc Lehmann RXVT-Unicode 4.3 Marc Lehmann RXVT-Unicode 4.2 Marc Lehmann RXVT-Unicode 4.1 Marc Lehmann RXVT-Unicode 4.0 Marc Lehmann RXVT-Unicode 3.9 Marc Lehmann RXVT-Unicode 3.8 Marc Lehmann RXVT-Unicode 3.7 Marc Lehmann RXVT-Unicode 3.6 Marc Lehmann RXVT-Unicode 3.5 Marc Lehmann RXVT-Unicode 3.4 Gentoo Linux

Not Vulnerable:	Marc Lehmann RXVT-Unicode 5.3

Discussion

RXVT-Unicode Escape Sequence Remote Buffer Overflow Vulnerability

A remote buffer overflow vulnerability affects rxvt-unicode. The issue is due to a failure of the application to securely copy externally supplied input into sensitive process buffers.

An attacker may leverage this issue to execute arbitrary code with the privileges of the unsuspecting user that activated the affected application.

Exploit / POC

RXVT-Unicode Escape Sequence Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

RXVT-Unicode Escape Sequence Remote Buffer Overflow Vulnerability

Solution:
The vendor has released an upgrade dealing with this issue.

Gentoo has released an advisory (GLSA 200503-23) and an updated eBuild to address this vulnerability. Gentoo users that are running the affected software may apply the update by issuing the following sequence of commands as a superuser:
emerge --sync
emerge --ask --oneshot --verbose ">=x11-terms/rxvt-unicode-5.3"

Marc Lehmann RXVT-Unicode 3.4