LibDB SNPrintF Buffer Overflow Vulnerability

Bugtraq ID:	3497
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 01 2001 12:00AM
Updated:	Nov 01 2001 12:00AM
Credit:	This vulnerability was announced in a Caldera Security Advisory on November 1, 2001.
Vulnerable:	Sleepycat Software db 2.7.7 + Caldera OpenLinux Server 3.1 + Caldera OpenLinux Workstation 3.1
Not Vulnerable:

LibDB SNPrintF Buffer Overflow Vulnerability

libdb is an implementation of the Berkeley DB software package. It is distributed by SleepyCat software, and included with many operating systems.

A problem in the package has been identified that may allow users to gain elevated privileges. The problem is due to the insecure wrapper implementation of a secure programming function. The implementation of snprintf used with libdb is a wrapper, and passes data to sprintf without size restrictions.

It may be possible for an attacker to exploit a program using this version of snprintf, and execute code, potentially gaining elevated privileges or administrative access.

LibDB SNPrintF Buffer Overflow Vulnerability

Solution:
Vendor fixes available:


Sleepycat Software db 2.7.7

• Caldera OpenLinux 3.1 Server db-2.7.7-12.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS/db -2.7.7-12.i386.rpm


• Caldera OpenLinux 3.1 Workstation db-2.7.7-12.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RP MS/db-2.7.7-12.i386.rpm