Petris Local Buffer Overflow Vulnerability
BID:16190
Info
Petris Local Buffer Overflow Vulnerability
| Bugtraq ID: | 16190 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2005-3540 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 09 2006 12:00AM |
| Updated: | Jan 10 2008 04:39PM |
| Credit: | Discovered by Steve Kemp from the Debian Security Audit Project. |
| Vulnerable: |
Nortel Networks VPN Router 5000 1.0.1 KETM KETM 0.0.6 |
| Not Vulnerable: | |
Discussion
Petris Local Buffer Overflow Vulnerability
petris is vulnerable to a locally exploitable buffer overflow vulnerability. It has been reported that a local attacker may exploit this condition to execute attacker-supplied code with group games privileges.
Due to a lack of information, further details cannot be provided at the moment. This BID will be updated when more information becomes available.
petris is vulnerable to a locally exploitable buffer overflow vulnerability. It has been reported that a local attacker may exploit this condition to execute attacker-supplied code with group games privileges.
Due to a lack of information, further details cannot be provided at the moment. This BID will be updated when more information becomes available.
Exploit / POC
Petris Local Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Petris Local Buffer Overflow Vulnerability
Solution:
Debian Linux has released security advisory DSA 929-1 addressing this issue. Please see the referenced advisory for further information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Debian Linux has released security advisory DSA 929-1 addressing this issue. Please see the referenced advisory for further information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.