XTerm Title Bar Buffer Overflow Vulnerability
BID:3663
Info
XTerm Title Bar Buffer Overflow Vulnerability
| Bugtraq ID: | 3663 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2001-0955 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 08 2001 12:00AM |
| Updated: | Jul 11 2009 09:06AM |
| Credit: | This vulnerability was found by KF <[email protected]>, and announced via Bugtraq on December 8, 2001. |
| Vulnerable: |
XFree86 X11R6 4.0.3 XFree86 X11R6 4.0.1 XFree86 X11R6 4.0 |
| Not Vulnerable: | |
Discussion
XTerm Title Bar Buffer Overflow Vulnerability
XFree86 is a freely available implementation of the X Window System. It is maintained by public domain, and package with many Linux, Unix and Unix clone operating systems.
A problem could allow an attacker to overwrite stack variables, including the return address of the process. An excessively long string is supplied with the -title option of xterm results in a buffer overflow.
Since xterm is included on most systems as a setuid root executable, this makes it possible for a malicious local user to execute arbitrary code as root.
XFree86 is a freely available implementation of the X Window System. It is maintained by public domain, and package with many Linux, Unix and Unix clone operating systems.
A problem could allow an attacker to overwrite stack variables, including the return address of the process. An excessively long string is supplied with the -title option of xterm results in a buffer overflow.
Since xterm is included on most systems as a setuid root executable, this makes it possible for a malicious local user to execute arbitrary code as root.
Exploit / POC
XTerm Title Bar Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
XTerm Title Bar Buffer Overflow Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
XTerm Title Bar Buffer Overflow Vulnerability
References:
References: