IPFilter 'ippool' 'lib/load_http.c' Local Buffer Overflow Vulnerability

Bugtraq ID:	35076
Class:	Boundary Condition Error
CVE:	CVE-2009-1476
Remote:	No
Local:	Yes
Published:	May 22 2009 12:00AM
Updated:	May 22 2009 07:40PM
Credit:	Maksymilian Arciemowicz
Vulnerable:	Darren Reed IPFilter 4.1.31
Not Vulnerable:

IPFilter 'ippool' 'lib/load_http.c' Local Buffer Overflow Vulnerability

IPFilter is prone to a local buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input.

Local attackers can exploit this issue to execute arbitrary code in the context of the affected application or to gain kernel-level privileges. Failed attempts will cause denial-of-service conditions.

IPFilter 4.1.31 is vulnerable; other versions may also be affected.

IPFilter 'ippool' 'lib/load_http.c' Local Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IPFilter 'ippool' 'lib/load_http.c' Local Buffer Overflow Vulnerability

Solution:
A patch is available. Please see the references for details.

IPFilter 'ippool' 'lib/load_http.c' Local Buffer Overflow Vulnerability

References:

• IPFilter (ippool) 4.1.31 lib/load_http.c buffer overflow (Maksymilian Arciemowicz)
  
• IPFilter Homepage (Darren Reed)
  
• src/dist/ipf/lib/load_http.c - view - 1.2 (christos )