TIATunnel Authentication Mechanism Buffer Overflow Vulnerability
BID:2831
Info
TIATunnel Authentication Mechanism Buffer Overflow Vulnerability
| Bugtraq ID: | 2831 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 06 2001 12:00AM |
| Updated: | Jun 06 2001 12:00AM |
| Credit: | This vulnerability was announced to Bugtraq by qitest1 <[email protected]> on June 6, 2001. |
| Vulnerable: |
PKCrew TIAtunnel 0.9 alpha2 |
| Not Vulnerable: |
PKCrew TIAtunnel 0.9 alpha3 |
Discussion
TIATunnel Authentication Mechanism Buffer Overflow Vulnerability
TIAtunnel is a freely available IRC session bouncing software package. It is distributed by the pkcrew.
A problem in the software package makes it possible for a remote user to gain a local shell. Due to a buffer overflow in the authentication mechanism of TIAtunnel, it is possible for a remote user to overwrite variables on the stack, including the return address, and thus gaining a remote shell.
Therefore, it is possible for a remote user to gain a local interactive shell with the permissions of the TIAtunnel process.
TIAtunnel is a freely available IRC session bouncing software package. It is distributed by the pkcrew.
A problem in the software package makes it possible for a remote user to gain a local shell. Due to a buffer overflow in the authentication mechanism of TIAtunnel, it is possible for a remote user to overwrite variables on the stack, including the return address, and thus gaining a remote shell.
Therefore, it is possible for a remote user to gain a local interactive shell with the permissions of the TIAtunnel process.
Exploit / POC
TIATunnel Authentication Mechanism Buffer Overflow Vulnerability
courtesy qitest1 - 5/06/2001
courtesy qitest1 - 5/06/2001
Solution / Fix
TIATunnel Authentication Mechanism Buffer Overflow Vulnerability
Solution:
Upgrade available:
PKCrew TIAtunnel 0.9 alpha2
Solution:
Upgrade available:
PKCrew TIAtunnel 0.9 alpha2
-
PKCrew TIAtunnel 0.9alpha3
http://tiatunnel.pkcrew.org/download/tiatunnel-0.9alpha3.tar.gz
References
TIATunnel Authentication Mechanism Buffer Overflow Vulnerability
References:
References: