GPM-Root Format String Vulnerability
BID:3750
Info
GPM-Root Format String Vulnerability
| Bugtraq ID: | 3750 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 28 2001 12:00AM |
| Updated: | Dec 28 2001 12:00AM |
| Credit: | This vulnerability was announced in a Debian Security Advisory on December 27, 2001. |
| Vulnerable: |
GPM GPM 1.17.8 |
| Not Vulnerable: | |
Discussion
GPM-Root Format String Vulnerability
gpm is the General Mouse Protocol, a software package maintained by public domain. It is freely available, and open source. It runs on Linux and other Unix systems.
gpm does not properly handle format strings supplied by an arbitrary user. A user may pass arbitrary format strings to the gpm-root program, that could result in the execution of arbitrary code. The gpm program is started by init with root privileges.
gpm is the General Mouse Protocol, a software package maintained by public domain. It is freely available, and open source. It runs on Linux and other Unix systems.
gpm does not properly handle format strings supplied by an arbitrary user. A user may pass arbitrary format strings to the gpm-root program, that could result in the execution of arbitrary code. The gpm program is started by init with root privileges.
Exploit / POC
GPM-Root Format String Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
GPM-Root Format String Vulnerability
Solution:
Fixes available:
GPM GPM 1.17.8
Solution:
Fixes available:
GPM GPM 1.17.8
-
Debian 2.2 alpha gpm_1.17.8-18.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/gpm_ 1.17.8-18.1_alpha.deb -
Debian 2.2 alpha libgpmg1-dev_1.17.8-18.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/libg pmg1-dev_1.17.8-18.1_alpha.deb -
Debian 2.2 alpha libgpmg1_1.17.8-18.1_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/libg pmg1_1.17.8-18.1_alpha.deb -
Debian 2.2 arm gpm_1.17.8-18.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/gpm_1. 17.8-18.1_arm.deb -
Debian 2.2 arm libgpmg1-dev_1.17.8-18.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/libgpm g1-dev_1.17.8-18.1_arm.deb -
Debian 2.2 arm libgpmg1_1.17.8-18.1_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/libgpm g1_1.17.8-18.1_arm.deb -
Debian 2.2 i386 gpm_1.17.8-18.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/gpm_1 .17.8-18.1_i386.deb -
Debian 2.2 i386 libgpm1-altdev_1.17.8-18.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/libgp m1-altdev_1.17.8-18.1_i386.deb -
Debian 2.2 i386 libgpm1_1.17.8-18.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/libgp m1_1.17.8-18.1_i386.deb -
Debian 2.2 i386 libgpmg1-dev_1.17.8-18.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/libgp mg1-dev_1.17.8-18.1_i386.deb -
Debian 2.2 i386 libgpmg1_1.17.8-18.1_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/libgp mg1_1.17.8-18.1_i386.deb -
Debian 2.2 m68k gpm_1.17.8-18.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/gpm_1 .17.8-18.1_m68k.deb -
Debian 2.2 m68k libgpm1-altdev_1.17.8-18.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/libgp m1-altdev_1.17.8-18.1_m68k.deb -
Debian 2.2 m68k libgpm1_1.17.8-18.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/libgp m1_1.17.8-18.1_m68k.deb -
Debian 2.2 m68k libgpmg1-dev_1.17.8-18.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/libgp mg1-dev_1.17.8-18.1_m68k.deb -
Debian 2.2 m68k libgpmg1_1.17.8-18.1_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/libgp mg1_1.17.8-18.1_m68k.deb -
Debian 2.2 ppc gpm_1.17.8-18.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/gp m_1.17.8-18.1_powerpc.deb -
Debian 2.2 ppc libgpmg1-dev_1.17.8-18.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/li bgpmg1-dev_1.17.8-18.1_powerpc.deb -
Debian 2.2 ppc libgpmg1_1.17.8-18.1_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/li bgpmg1_1.17.8-18.1_powerpc.deb -
Debian 2.2 sparc gpm_1.17.8-18.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/gpm_ 1.17.8-18.1_sparc.deb -
Debian 2.2 sparc libgpmg1-dev_1.17.8-18.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/libg pmg1-dev_1.17.8-18.1_sparc.deb -
Debian 2.2 sparc libgpmg1_1.17.8-18.1_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/libg pmg1_1.17.8-18.1_sparc.deb
References
GPM-Root Format String Vulnerability
References:
References: