Open Motif libUil Open_source_file Buffer Overflow Vulnerability

Bugtraq ID:	15686
Class:	Boundary Condition Error
CVE:	CVE-2005-3964
Remote:	Yes
Local:	Yes
Published:	Dec 02 2005 12:00AM
Updated:	Jul 02 2008 08:00PM
Credit:	Reported by <[email protected]>.
Vulnerable:	Redhat Red Hat Network Satellite Server 4.2 Redhat Network Satellite (for RHEL 4) 4.2 Redhat Network Satellite (for RHEL 3) 4.2 Open Motif Open Motif 2.2.3
Not Vulnerable:

Open Motif libUil Open_source_file Buffer Overflow Vulnerability

A buffer-overflow vulnerability affects libUil (User Interface Language) and can leave applications that link to the library vulnerable.

Successful exploits may result in a remote compromise or local privilege escalation, depending on the affected application linked to the library.

Open Motif is derived from the original Motif code maintained by the Open Group. Motif is likely also vulnerable.

NOTE: This issue was originally reported in BID 15678 (Open Motif libUil Buffer Overflow Vulnerabilities); it is now being assigned a new record.

Open Motif libUil Open_source_file Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Open Motif libUil Open_source_file Buffer Overflow Vulnerability

Solution:
Fixes are available. Please see the references for more information.

Open Motif libUil Open_source_file Buffer Overflow Vulnerability

References:

• Open Motif Homepage (The Open Group)
  
• [xfocus-SD-051202]openMotif libUil Multiple vulnerability ("[email protected]" )
  
• RHSA-2008:0524-4 Red Hat Network Satellite Server security update (Red Hat)