Heimdal FTPD gss_userok() Free Uninitialized Pointer Memory Corruption Vulnerability
BID:26758
Info
Heimdal FTPD gss_userok() Free Uninitialized Pointer Memory Corruption Vulnerability
| Bugtraq ID: | 26758 |
| Class: | Design Error |
| CVE: |
CVE-2007-5939 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 07 2007 12:00AM |
| Updated: | Dec 07 2007 10:22PM |
| Credit: | Venustech AD_LAB is credited with the discovery of this vulnerability. |
| Vulnerable: |
MandrakeSoft Corporate Server 4.0 Heimdal Heimdal 0.7.2 Heimdal Heimdal 0.7.1 Heimdal Heimdal 0.7 Heimdal Heimdal 0.6.6 Heimdal Heimdal 0.6.5 Heimdal Heimdal 0.6.4 Heimdal Heimdal 0.6.3 Heimdal Heimdal 0.6.2 Heimdal Heimdal 0.6.1 rc3 Heimdal Heimdal 0.6.1 Heimdal Heimdal 0.6 Heimdal Heimdal 0.5.3 Heimdal Heimdal 0.5.2 Heimdal Heimdal 0.5.1 Heimdal Heimdal 0.5 .0 Heimdal Heimdal 0.4 e Heimdal Heimdal 0.4 d Heimdal Heimdal 0.4 c Heimdal Heimdal 0.4 b Heimdal Heimdal 0.4 a Heimdal Heimdal 0.3 f Gentoo app-crypt/heimdal 0.7.2-r3 |
| Not Vulnerable: | |
Discussion
Heimdal FTPD gss_userok() Free Uninitialized Pointer Memory Corruption Vulnerability
Heimdal is prone to a memory-corruption vulnerability because it performs a 'free()' call on an uninitialized pointer.
This issue affects the application's FTP daemon.
The implications of this issue are currently unknown. Arbitrary code execution or denial-of-service attacks may be possible. We will update this BID as more information emerges.
Heimdal 0.7.2 and prior versions are vulnerable.
Heimdal is prone to a memory-corruption vulnerability because it performs a 'free()' call on an uninitialized pointer.
This issue affects the application's FTP daemon.
The implications of this issue are currently unknown. Arbitrary code execution or denial-of-service attacks may be possible. We will update this BID as more information emerges.
Heimdal 0.7.2 and prior versions are vulnerable.
Exploit / POC
Heimdal FTPD gss_userok() Free Uninitialized Pointer Memory Corruption Vulnerability
Attackers can trigger this issue using readily available network utilities.
Attackers can trigger this issue using readily available network utilities.
Solution / Fix
Heimdal FTPD gss_userok() Free Uninitialized Pointer Memory Corruption Vulnerability
Solution:
Advisories and fixes that address this issue are available. Please see the references for more information.
Solution:
Advisories and fixes that address this issue are available. Please see the references for more information.
References
Heimdal FTPD gss_userok() Free Uninitialized Pointer Memory Corruption Vulnerability
References:
References: