SARG Multiple Unspecified Buffer Overflow Vulnerabilities

Bugtraq ID:	29141
Class:	Boundary Condition Error
CVE:	CVE-2008-1922
Remote:	Yes
Local:	No
Published:	May 10 2008 12:00AM
Updated:	Sep 07 2010 08:22PM
Credit:	This issue was disclosed in the referenced SUSE advisory.
Vulnerable:	SuSE Linux 10.1 x86-64 SuSE Linux 10.1 x86 SuSE Linux 10.1 ppc SARG SARG 2.2.31 SARG SARG 2.2.4 SARG SARG 2.2.3.1 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Multi Network Firewall 2.0 Gentoo Linux
Not Vulnerable:

SARG Multiple Unspecified Buffer Overflow Vulnerabilities

SARG is prone to multiple buffer-overflow vulnerabilities.

A remote attacker can exploit these issues to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely result in denial-of-service conditions.

SARG Multiple Unspecified Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SARG Multiple Unspecified Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva sarg-2.2.5-0.3mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.0

• Mandriva sarg-2.2.5-0.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Multi Network Firewall 2.0

• Mandriva sarg-2.2.5-0.2.M20mdk.i586.rpm
  http://www.mandriva.com/en/download/

SARG Multiple Unspecified Buffer Overflow Vulnerabilities

References:

• SARG Homepage (SARG)