Linux Kernel CIFS Transport.C Remote Buffer Overflow Vulnerability
BID:26438
Info
Linux Kernel CIFS Transport.C Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 26438 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-5904 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 14 2007 12:00AM |
| Updated: | Jun 20 2008 11:51PM |
| Credit: | Przemyslaw Wegrzyn is credited with the discovery of this vulnerability. |
| Vulnerable: |
Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise SDK 10.SP1 SuSE Suse Linux Enterprise Desktop 10 SP1 SuSE SUSE Linux Enterprise 10 SP1 DEBUGINFO SuSE Linux Enterprise Server 10.SP1 SuSE Linux 10.1 x86-64 SuSE Linux 10.1 x86 SuSE Linux 10.1 ppc S.u.S.E. SUSE Linux Enterprise Server RT Solution 10 0 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9 rPath rPath Linux 1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux 5 Server Redhat Desktop 4.0 Linux kernel 2.6.23.1 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Avaya Voice Portal 4.1 Avaya Voice Portal 4.0 Avaya Voice Portal 3.0 Avaya SIP Enablement Services 4.0 Avaya Proactive Contact 4.0 Avaya Messaging Storage Server MSS 3.0 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 3.1 Avaya Message Networking MN 3.1 Avaya Message Networking 3.1 Avaya Message Networking Avaya Meeting Exchange 5.0 .0.52 Avaya Intuity AUDIX LX 2.0 Avaya EMMC 1.021 Avaya Communication Manager 5.0 Avaya Communication Manager 4.0 Avaya Communication Manager 3.1 Avaya Communication Manager 3.0 Avaya Aura SIP Enablement Services 3.1.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura SIP Enablement Services 3.1 Avaya Aura Application Enablement Services 4.0.1 Avaya Aura Application Enablement Services 4.1 Avaya AES 4.0 |
| Not Vulnerable: | |
Discussion
Linux Kernel CIFS Transport.C Remote Buffer Overflow Vulnerability
The Linux kernel is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized buffer.
An attacker can exploit this issue to execute arbitrary code with kernel-level privileges or cause the affected kernel to crash, denying service to legitimate users.
This issue affects version 2.6.23.1; previous versions may also be affected.
The Linux kernel is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized buffer.
An attacker can exploit this issue to execute arbitrary code with kernel-level privileges or cause the affected kernel to crash, denying service to legitimate users.
This issue affects version 2.6.23.1; previous versions may also be affected.
Exploit / POC
Linux Kernel CIFS Transport.C Remote Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel CIFS Transport.C Remote Buffer Overflow Vulnerability
Solution:
The vendor has released patches for this issue in their source-code repository. Please see the references for more information.
Solution:
The vendor has released patches for this issue in their source-code repository. Please see the references for more information.
References
Linux Kernel CIFS Transport.C Remote Buffer Overflow Vulnerability
References:
References:
- [CIFS] Fix buffer overflow if server sends corrupt response to small (Kernel.org)
- Buffer overflow in CIFS VFS. (Przemyslaw Wegrzyn
) - [USN-618-1] Linux kernel vulnerabilities (Ubuntu)
- ASA-2008-165 kernel security and bug fix update (RHSA-2008-0167) (Avaya)
- Linux Kernel Homepage (Linux Kernel)
- RHSA-2008:0089-21 kernel security and bug fix update (Red Hat)
- RHSA-2008:0167-8 - kernel security and bug fix update (Red Hat)