BSD Nvi Format String Vulnerability

Bugtraq ID:	3456
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 20 2001 12:00AM
Updated:	Oct 20 2001 12:00AM
Credit:	This vulnerability was submitted in a Debian Security Advisory.
Vulnerable:	BSD nvi 1.79 + Debian Linux 2.2 sparc + Debian Linux 2.2 powerpc + Debian Linux 2.2 arm + Debian Linux 2.2 alpha + Debian Linux 2.2 68k + Debian Linux 2.2
Not Vulnerable:

BSD Nvi Format String Vulnerability

Nvi is an implementation of the vi text editor.

English and multilingual versions of Nvi are prone to format string attacks. This is due to insufficient validation of externally supplied data to the routine that handles saved filenames.

This issue has not been proven to be exploitable. However, if it can be exploited then it may be possible for the local attacker to execute arbitrary code and potentially elevate privileges on the host.

BSD Nvi Format String Vulnerability

Solution:
Upgrades are available.


BSD nvi 1.79

• Debian 2.2 alpha nvi-m17n-canna_1.79+19991117-2.3_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/nvi- m17n-canna_1.79+19991117-2.3_alpha.deb


• Debian 2.2 alpha nvi-m17n_1.79+19991117-2.3_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/nvi- m17n_1.79+19991117-2.3_alpha.deb


• Debian 2.2 alpha nvi_1.79-16a.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/nvi_ 1.79-16a.1_alpha.deb


• Debian 2.2 arm nvi-m17n-canna_1.79+19991117-2.3_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/nvi-m1 7n-canna_1.79+19991117-2.3_arm.deb


• Debian 2.2 arm nvi-m17n_1.79+19991117-2.3_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/nvi-m1 7n_1.79+19991117-2.3_arm.deb


• Debian 2.2 arm nvi_1.79-16a.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/nvi_1. 79-16a.1_arm.deb


• Debian 2.2 i386 nvi-m17n-canna_1.79+19991117-2.3_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/nvi-m 17n-canna_1.79+19991117-2.3_i386.deb


• Debian 2.2 i386 nvi-m17n_1.79+19991117-2.3_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/nvi-m 17n_1.79+19991117-2.3_i386.deb


• Debian 2.2 i386 nvi_1.79-16a.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/nvi_1 .79-16a.1_i386.deb


• Debian 2.2 m68k nvi-m17n-canna_1.79+19991117-2.3_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/nvi-m 17n-canna_1.79+19991117-2.3_m68k.deb


• Debian 2.2 m68k nvi-m17n_1.79+19991117-2.3_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/nvi-m 17n_1.79+19991117-2.3_m68k.deb


• Debian 2.2 m68k nvi_1.79-16a.1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/nvi_1 .79-16a.1_m68k.deb


• Debian 2.2 noarch nvi-m17n-common_1.79+19991117-2.3_all.deb
  http://security.debian.org/dists/stable/updates/main/binary-all/nvi-m1 7n-common_1.79+19991117-2.3_all.deb


• Debian 2.2 ppc nvi-m17n-canna_1.79+19991117-2.3_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/nv i-m17n-canna_1.79+19991117-2.3_powerpc.deb


• Debian 2.2 ppc nvi-m17n_1.79+19991117-2.3_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/nv i-m17n_1.79+19991117-2.3_powerpc.deb


• Debian 2.2 ppc nvi_1.79-16a.1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/nv i_1.79-16a.1_powerpc.deb


• Debian 2.2 sparc nvi-m17n-canna_1.79+19991117-2.3_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/nvi- m17n-canna_1.79+19991117-2.3_sparc.deb


• Debian 2.2 sparc nvi-m17n_1.79+19991117-2.3_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/nvi- m17n_1.79+19991117-2.3_sparc.deb


• Debian 2.2 sparc nvi_1.79-16a.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/nvi_ 1.79-16a.1_sparc.deb

BSD Nvi Format String Vulnerability

References: