GNU GLibC LD.SO Mask Dynamic Loader Integer Overflow Vulnerability
BID:24758
Info
GNU GLibC LD.SO Mask Dynamic Loader Integer Overflow Vulnerability
| Bugtraq ID: | 24758 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-3508 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 03 2007 12:00AM |
| Updated: | Jul 04 2007 11:07PM |
| Credit: | Tavis Ormandy of the Gentoo Linux Security Team discovered this issue. |
| Vulnerable: |
GNU glibc 2.5 GNU glibc 2.3.10 GNU glibc 2.3.4 GNU glibc 2.3.3 GNU glibc 2.3.2 GNU glibc 2.3.1 GNU glibc 2.3 GNU glibc 2.2.5 GNU glibc 2.2.4 GNU glibc 2.2.3 GNU glibc 2.2.2 GNU glibc 2.2.1 GNU glibc 2.2 GNU glibc 2.1.3 -10 GNU glibc 2.1.3 GNU glibc 2.1.2 GNU glibc 2.1.1 -6 GNU glibc 2.1.1 GNU glibc 2.1 GNU glibc 2.0.6 GNU glibc 2.0.5 GNU glibc 2.0.4 GNU glibc 2.0.3 GNU glibc 2.0.2 GNU glibc 2.0.1 GNU glibc 2.0 GNU Cfengine 1.2.3 Gentoo Linux |
| Not Vulnerable: | |
Discussion
GNU GLibC LD.SO Mask Dynamic Loader Integer Overflow Vulnerability
GNU glibc is prone to an integer-overflow vulnerability because it fails to properly ensure that integer math operations do not wrap around.
An attacker can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will result in the complete compromise of affected application. Failed exploit attempts will result in a denial of service.
GNU glibc 2.5 and prior versions are prone to this issue.
GNU glibc is prone to an integer-overflow vulnerability because it fails to properly ensure that integer math operations do not wrap around.
An attacker can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will result in the complete compromise of affected application. Failed exploit attempts will result in a denial of service.
GNU glibc 2.5 and prior versions are prone to this issue.
Exploit / POC
GNU GLibC LD.SO Mask Dynamic Loader Integer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution / Fix
GNU GLibC LD.SO Mask Dynamic Loader Integer Overflow Vulnerability
Solution:
Fixes addressing this issue are available. Please see the references for more information.
Solution:
Fixes addressing this issue are available. Please see the references for more information.