Streamripper Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	32356
Class:	Boundary Condition Error
CVE:	CVE-2008-4829
Remote:	Yes
Local:	No
Published:	Nov 19 2008 12:00AM
Updated:	Dec 08 2008 11:41PM
Credit:	Stefan Cornelius, Secunia Research.
Vulnerable:	Streamripper Streamripper 1.63.5 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:

Streamripper Multiple Buffer Overflow Vulnerabilities

Streamripper is prone to multiple buffer-overflow vulnerabilities.

Successful exploits may allow attackers to execute arbitrary code in the context of the application. This may result in a compromise of the underlying system. Failed attempts may lead to a denial-of-service condition.

Streamripper 1.63.5 is vulnerable; other versions may also be affected.

Streamripper Multiple Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Streamripper Multiple Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 amd64

• Debian streamripper_1.61.27-1+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/s/streamripper/streamripp er_1.61.27-1+etch1_amd64.deb

Debian Linux 4.0 mipsel

• Debian streamripper_1.61.27-1+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/s/streamripper/streamripp er_1.61.27-1+etch1_mipsel.deb

Debian Linux 4.0 ia-32

• Debian streamripper_1.61.27-1+etch1_i386.deb
  http://security.debian.org/pool/updates/main/s/streamripper/streamripp er_1.61.27-1+etch1_i386.deb

Debian Linux 4.0 arm

• Debian streamripper_1.61.27-1+etch1_arm.deb
  http://security.debian.org/pool/updates/main/s/streamripper/streamripp er_1.61.27-1+etch1_arm.deb

Debian Linux 4.0 hppa

• Debian streamripper_1.61.27-1+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/s/streamripper/streamripp er_1.61.27-1+etch1_hppa.deb

Debian Linux 4.0 sparc

• Debian streamripper_1.61.27-1+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/s/streamripper/streamripp er_1.61.27-1+etch1_sparc.deb

Debian Linux 4.0 s/390

• Debian streamripper_1.61.27-1+etch1_s390.deb
  http://security.debian.org/pool/updates/main/s/streamripper/streamripp er_1.61.27-1+etch1_s390.deb

Debian Linux 4.0 powerpc

• Debian streamripper_1.61.27-1+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/streamripper/streamripp er_1.61.27-1+etch1_powerpc.deb

Debian Linux 4.0 alpha

• Debian streamripper_1.61.27-1+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/s/streamripper/streamripp er_1.61.27-1+etch1_alpha.deb

Debian Linux 4.0 ia-64

• Debian streamripper_1.61.27-1+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/s/streamripper/streamripp er_1.61.27-1+etch1_ia64.deb

Debian Linux 4.0 mips

• Debian streamripper_1.61.27-1+etch1_mips.deb
  http://security.debian.org/pool/updates/main/s/streamripper/streamripp er_1.61.27-1+etch1_mips.deb

Streamripper Multiple Buffer Overflow Vulnerabilities

References:

• Streamripper Home Page (Streamripper)
  
• Secunia Research: Streamripper Multiple Buffer Overflows (Secunia Research )
  
• Streamripper Multiple Buffer Overflows (Secunia Research)