Namazu Environment Variable Buffer Overflow Vulnerability
BID:3846
Info
Namazu Environment Variable Buffer Overflow Vulnerability
| Bugtraq ID: | 3846 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 10 2002 12:00AM |
| Updated: | Jan 10 2002 12:00AM |
| Credit: | This issue was originally reported on the Namazu Project homepage on December 27th, 2001. |
| Vulnerable: |
Namazu Project Namazu 2.0.9 Namazu Project Namazu 2.0.8 Namazu Project Namazu 2.0.7 |
| Not Vulnerable: |
Namazu Project Namazu 2.0.10 |
Discussion
Namazu Environment Variable Buffer Overflow Vulnerability
Namazu is a web based searching and indexing system. It is designed to be easy to use for small or medium scale web indexing and searching, or for personal use.
Due to insufficient bounds checking, it may be possible to remotely exploit Namazu to cause arbitrary attacker-supplied code to be executed.
If Namazu can be successfully exploited, it may enable a remote attacker to gain local non-privileged access to the host.
Numerous potentially exploitable buffer overflows may exist in Namazu versions prior to 2.0.10.
Namazu is a web based searching and indexing system. It is designed to be easy to use for small or medium scale web indexing and searching, or for personal use.
Due to insufficient bounds checking, it may be possible to remotely exploit Namazu to cause arbitrary attacker-supplied code to be executed.
If Namazu can be successfully exploited, it may enable a remote attacker to gain local non-privileged access to the host.
Numerous potentially exploitable buffer overflows may exist in Namazu versions prior to 2.0.10.
Exploit / POC
Namazu Environment Variable Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Namazu Environment Variable Buffer Overflow Vulnerability
Solution:
Upgrades are available.
Namazu Project Namazu 2.0.7
Namazu Project Namazu 2.0.8
Namazu Project Namazu 2.0.9
Solution:
Upgrades are available.
Namazu Project Namazu 2.0.7
-
Namazu Project namazu-2.0.10.tar.gz
http://www.namazu.org/stable/namazu-2.0.10.tar.gz
Namazu Project Namazu 2.0.8
-
Namazu Project namazu-2.0.10.tar.gz
http://www.namazu.org/stable/namazu-2.0.10.tar.gz -
Red Hat namazu-2.0.10-0j1.i386.rpm
ftp://updates.redhat.com/7.0/ja/os/i386/namazu-2.0.10-0j1.i386.rpm -
Red Hat namazu-cgi-2.0.10-0j1.i386.rpm
ftp://updates.redhat.com/7.0/ja/os/i386/namazu-cgi-2.0.10-0j1.i386.rpm
Namazu Project Namazu 2.0.9
-
Namazu Project namazu-2.0.10.tar.gz
http://www.namazu.org/stable/namazu-2.0.10.tar.gz
References
Namazu Environment Variable Buffer Overflow Vulnerability
References:
References:
- Namazu Homepage (Namazu Project)