Iron Bars SHell Local Format String Vulnerability

Bugtraq ID:	13720
Class:	Input Validation Error
CVE:	CVE-2005-1738
Remote:	No
Local:	Yes
Published:	May 24 2005 12:00AM
Updated:	Jul 12 2009 02:56PM
Credit:	Reported by the vendor.
Vulnerable:	Iron Bars SHell Iron Bars SHell 0.3 c Iron Bars SHell Iron Bars SHell 0.3 b Iron Bars SHell Iron Bars SHell 0.3 a
Not Vulnerable:	Iron Bars SHell Iron Bars SHell 0.3 d

Iron Bars SHell Local Format String Vulnerability

Iron Bars SHell is affected by a local format string vulnerability.

As a result of this issue, malicious data containing format specifiers will be interpreted literally by the application; this may result in attacker-specified memory being corrupted or disclosed, leading to arbitrary code execution.

Iron Bars SHell 0.3c and prior versions are affected by this issue.

Iron Bars SHell Local Format String Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Iron Bars SHell Local Format String Vulnerability

Solution:
The vendor has released Iron Bars SHell 0.3d to address this issue.


Iron Bars SHell Iron Bars SHell 0.3 b

• Iron Bars SHell ibsh-0.3d.tar.gz
  http://freshmeat.net/redir/ibsh/57192/url_tgz/ibsh-0.3d.tar.gz

Iron Bars SHell Iron Bars SHell 0.3 c

• Iron Bars SHell ibsh-0.3d.tar.gz
  http://freshmeat.net/redir/ibsh/57192/url_tgz/ibsh-0.3d.tar.gz

Iron Bars SHell Iron Bars SHell 0.3 a

• Iron Bars SHell ibsh-0.3d.tar.gz
  http://freshmeat.net/redir/ibsh/57192/url_tgz/ibsh-0.3d.tar.gz

Iron Bars SHell Local Format String Vulnerability

References:

• Home Page (Iron Bars SHell)