Open Motif libUil Diag_issue_diagnostic Buffer Overflow Vulnerability

Bugtraq ID:	15684
Class:	Boundary Condition Error
CVE:	CVE-2005-3964
Remote:	Yes
Local:	Yes
Published:	Dec 02 2005 12:00AM
Updated:	Jul 02 2008 07:30PM
Credit:	Reported by <[email protected]>.
Vulnerable:	Redhat Red Hat Network Satellite Server 5.0 Redhat Red Hat Network Satellite Server 4.2 Redhat Network Satellite (for RHEL 4) 4.2 Redhat Network Satellite (for RHEL 3) 4.2 Open Motif Open Motif 2.2.3 Gentoo Linux
Not Vulnerable:

Open Motif libUil Diag_issue_diagnostic Buffer Overflow Vulnerability

A buffer-overflow vulnerability affects libUil (User Interface Language); applications that link to the library are vulnerable.

Successful exploits may result in a remote compromise or local privilege escalation, depending on the affected application linked to the library.

Open Motif is derived from the original Motif code maintained by the Open Group. Motif is likely also vulnerable.

This issue was originally reported in BID 15678 (Open Motif libUil Buffer Overflow Vulnerabilities); it is now being assigned a new record.

Open Motif libUil Diag_issue_diagnostic Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Open Motif libUil Diag_issue_diagnostic Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for details.

Open Motif libUil Diag_issue_diagnostic Buffer Overflow Vulnerability

References:

• Open Motif Homepage (The Open Group)
  
• [xfocus-SD-051202]openMotif libUil Multiple vulnerability ("[email protected]" )
  
• RHSA-2008:0261-4 Moderate: Red Hat Network Satellite Server security update (Red Hat)
  
• RHSA-2008:0524-4 Red Hat Network Satellite Server security update (Red Hat)