libvirt 'libvirt_proxy.c' Local Privilege Escalation Vulnerability

Bugtraq ID:	33724
Class:	Boundary Condition Error
CVE:	CVE-2009-0036
Remote:	No
Local:	Yes
Published:	Feb 10 2009 12:00AM
Updated:	Apr 27 2009 07:26PM
Credit:	Rasputin
Vulnerable:	Redhat Enterprise Linux Virtualization 5 Server Redhat Enterprise Linux Desktop Multi OS 5 client Pardus Linux 2008 0 libvirt libvirt 0.5.1
Not Vulnerable:	libvirt libvirt 0.6

libvirt 'libvirt_proxy.c' Local Privilege Escalation Vulnerability

The 'libvirt' library is prone to a local privilege-escalation vulnerability because it fails perform adequate boundary checks on user-supplied data.

Local attackers can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

The issue affects libvirt 0.5.1; other versions may also be affected.

libvirt 'libvirt_proxy.c' Local Privilege Escalation Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/33724.c

libvirt 'libvirt_proxy.c' Local Privilege Escalation Vulnerability

Solution:
The vendor has released updates. Please see the references for more information.

libvirt 'libvirt_proxy.c' Local Privilege Escalation Vulnerability

References:

• Bug 484947 - (CVE-2009-0036) CVE-2009-0036 libvirt_proxy buffer overflow (Josh Bressers)
  
• [libvirt] [PATCH] proxy: Fix use of uninitalized memory (Rasputin" )
  
• libvirt Homepage (libvirt )
  
• libvirt News (libvirt)