XMan ManPath Environment Variable Buffer Overflow
BID:3030
Info
XMan ManPath Environment Variable Buffer Overflow
| Bugtraq ID: | 3030 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2001-1178 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 11 2001 12:00AM |
| Updated: | Jul 11 2009 06:56AM |
| Credit: | This vulnerability was announced to Bugtraq by KF <[email protected]> on July 11, 2001. |
| Vulnerable: |
XFree86 X11R6 3.3.2 |
| Not Vulnerable: | |
Discussion
XMan ManPath Environment Variable Buffer Overflow
xman is a component included with the XFree86 Window System.
A buffer overflow in the handling of the MANPATH environment variable by xman makes it possible for a local user to execute arbitrary code. By inserting 70000 characters into the MANPATH variable, it is possible to overwrite stack variables, including the return address. xman is SGID man.
This problem makes it possible for a local user to execute arbitrary code, gaining elevated privileges, and potentially root access.
xman is a component included with the XFree86 Window System.
A buffer overflow in the handling of the MANPATH environment variable by xman makes it possible for a local user to execute arbitrary code. By inserting 70000 characters into the MANPATH variable, it is possible to overwrite stack variables, including the return address. xman is SGID man.
This problem makes it possible for a local user to execute arbitrary code, gaining elevated privileges, and potentially root access.
Solution / Fix
XMan ManPath Environment Variable Buffer Overflow
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
XMan ManPath Environment Variable Buffer Overflow
References:
References: