TMSNC UBX Message Remote Buffer Overflow Vulnerability

Bugtraq ID:	29850
Class:	Boundary Condition Error
CVE:	CVE-2008-2828
Remote:	Yes
Local:	No
Published:	Jun 20 2008 12:00AM
Updated:	Mar 12 2009 06:46PM
Credit:	Nico Golde <[email protected]>
Vulnerable:	TMSNC TMSNC 0.3.2 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:

TMSNC UBX Message Remote Buffer Overflow Vulnerability

TMSNC is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts will cause denial-of-service conditions.

This issue affects TMSNC 0.3.2; other versions may also be affected.

TMSNC UBX Message Remote Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TMSNC UBX Message Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

TMSNC UBX Message Remote Buffer Overflow Vulnerability

References:

• Debian Bug report logs - #487222 (Debian)
  
• Re: CVE id request: tmsnc (Nico Golde)
  
• TMSNC Homepage (TMSNC)