RPL/2 Insecure System Call Vulnerability
BID:3747
Info
RPL/2 Insecure System Call Vulnerability
| Bugtraq ID: | 3747 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 14 2001 12:00AM |
| Updated: | Dec 14 2001 12:00AM |
| Credit: | This vulnerability was publicized in the RPL/2 changelog for version 4.00pre3c, released on December 14, 2001. |
| Vulnerable: |
RPL/2 RPL/2 4.0 pre3b RPL/2 RPL/2 4.0 pre3a RPL/2 RPL/2 4.0 pre3 |
| Not Vulnerable: |
RPL/2 RPL/2 4.0 pre3e RPL/2 RPL/2 4.0 pre3d RPL/2 RPL/2 4.0 pre3c |
Discussion
RPL/2 Insecure System Call Vulnerability
RPL/2 is a programming language based on the RPL language used by Hewlett-Packard in the HP-28S calculator. It includes some extensions, and the ability to create graphical output and TeX files.
Some of the system calls made by RPL/2 pass user supplied input in an unsafe manner. It may be possible for a maliciously constructed program or input set to cause arbitrary shell commands to be executed by the RPL/2 process. Under some uses of RPL, this may lead to a local account compromise.
RPL/2 is a programming language based on the RPL language used by Hewlett-Packard in the HP-28S calculator. It includes some extensions, and the ability to create graphical output and TeX files.
Some of the system calls made by RPL/2 pass user supplied input in an unsafe manner. It may be possible for a maliciously constructed program or input set to cause arbitrary shell commands to be executed by the RPL/2 process. Under some uses of RPL, this may lead to a local account compromise.
Exploit / POC
RPL/2 Insecure System Call Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
RPL/2 Insecure System Call Vulnerability
Solution:
Updated versions have been made available:
RPL/2 RPL/2 4.0 pre3b
RPL/2 RPL/2 4.0 pre3
RPL/2 RPL/2 4.0 pre3a
Solution:
Updated versions have been made available:
RPL/2 RPL/2 4.0 pre3b
-
RPL/2 rpl-4.00pre3e.tar.bz2
http://rpl2.free.fr/rpl-4.00pre3e.tar.bz2
RPL/2 RPL/2 4.0 pre3
-
RPL/2 rpl-4.00pre3e.tar.bz2
http://rpl2.free.fr/rpl-4.00pre3e.tar.bz2
RPL/2 RPL/2 4.0 pre3a
-
RPL/2 rpl-4.00pre3e.tar.bz2
http://rpl2.free.fr/rpl-4.00pre3e.tar.bz2