BSD exec() Race Condition Vulnerability
BID:3891
Info
BSD exec() Race Condition Vulnerability
| Bugtraq ID: | 3891 |
| Class: | Race Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 16 2002 12:00AM |
| Updated: | Jan 16 2002 12:00AM |
| Credit: | NetBSD credits Tor Egge of FreeBSD. FreeBSD acknowledges Logan Gabriel <[email protected]>, Robert Watson <[email protected]>, Dag-Erling Smørgrav <[email protected]>. |
| Vulnerable: |
OpenBSD OpenBSD 2.9 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD 2.7 OpenBSD OpenBSD 2.6 OpenBSD OpenBSD 2.5 OpenBSD OpenBSD 2.4 OpenBSD OpenBSD 2.3 OpenBSD OpenBSD 2.2 OpenBSD OpenBSD 2.1 OpenBSD OpenBSD 2.0 OpenBSD OpenBSD 3.0 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5 NetBSD NetBSD 1.4.3 NetBSD NetBSD 1.4.2 NetBSD NetBSD 1.4.1 NetBSD NetBSD 1.4 NetBSD NetBSD 1.3.3 NetBSD NetBSD 1.3.2 NetBSD NetBSD 1.3.1 NetBSD NetBSD 1.3 FreeBSD FreeBSD 4.4 -STABLE FreeBSD FreeBSD 4.4 -RELENG FreeBSD FreeBSD 4.4 FreeBSD FreeBSD 4.3 -STABLE FreeBSD FreeBSD 4.3 -RELENG FreeBSD FreeBSD 4.3 -RELEASE FreeBSD FreeBSD 4.3 FreeBSD FreeBSD 4.2 -STABLE FreeBSD FreeBSD 4.2 -RELEASE FreeBSD FreeBSD 4.2 FreeBSD FreeBSD 4.1.1 -STABLE FreeBSD FreeBSD 4.1.1 -RELEASE FreeBSD FreeBSD 4.1.1 FreeBSD FreeBSD 4.1 FreeBSD FreeBSD 4.0 FreeBSD FreeBSD 3.5.1 FreeBSD FreeBSD 3.5 FreeBSD FreeBSD 3.4 FreeBSD FreeBSD 3.3 FreeBSD FreeBSD 3.2 FreeBSD FreeBSD 3.1 FreeBSD FreeBSD 3.0 FreeBSD FreeBSD 2.2.8 FreeBSD FreeBSD 2.2.6 FreeBSD FreeBSD 2.2.5 FreeBSD FreeBSD 2.2.4 FreeBSD FreeBSD 2.2.3 FreeBSD FreeBSD 2.2.2 FreeBSD FreeBSD 2.2 FreeBSD FreeBSD 2.1 FreeBSD FreeBSD 2.0 |
| Not Vulnerable: | |
Exploit / POC
BSD exec() Race Condition Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
BSD exec() Race Condition Vulnerability
Solution:
NetBSD has released patches. It is believed that other BSD operating systems may be vulnerable, however this has not been confirmed. There are no patches for these systems yet. This record will be updated if and when they become available.
It is believed that version 1.3 is vulnerable, however it is not confirmed. Users of those kernel versions are advised to upgrade to the latest version.
NetBSD 1.4.x and 1.5.x users can patch their kernel via CVS or apply the patches listed below:
FreeBSD has released patches.
A patch is available for OpenBSD 3.0 (older versions may still be vulnerable, systems must be upgraded to 3.0 before the patch can be applied).
OpenBSD OpenBSD 3.0
NetBSD NetBSD 1.4
NetBSD NetBSD 1.4.1
NetBSD NetBSD 1.4.2
NetBSD NetBSD 1.4.3
NetBSD NetBSD 1.5
NetBSD NetBSD 1.5.1
NetBSD NetBSD 1.5.2
FreeBSD FreeBSD 4.3 -RELEASE
FreeBSD FreeBSD 4.3 -RELENG
FreeBSD FreeBSD 4.4
FreeBSD FreeBSD 4.4 -STABLE
FreeBSD FreeBSD 4.4 -RELENG
Solution:
NetBSD has released patches. It is believed that other BSD operating systems may be vulnerable, however this has not been confirmed. There are no patches for these systems yet. This record will be updated if and when they become available.
It is believed that version 1.3 is vulnerable, however it is not confirmed. Users of those kernel versions are advised to upgrade to the latest version.
NetBSD 1.4.x and 1.5.x users can patch their kernel via CVS or apply the patches listed below:
FreeBSD has released patches.
A patch is available for OpenBSD 3.0 (older versions may still be vulnerable, systems must be upgraded to 3.0 before the patch can be applied).
OpenBSD OpenBSD 3.0
-
OpenBSD 012_ptrace.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/012_ptrace.patch
NetBSD NetBSD 1.4
-
NetBSD SA2002-001-ptrace-1.4.patch
To apply this patch (as root, in the kernel src directory):# patch < /path/to/SA2002-001-ptrace-1.4.patchA new kernel must then be built/installed and the system must be rebooted.http://www.netbsd.org/Documentation/kernel/#how_to_build_a_kernel
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2002-001-ptrace-1.4 .patch
NetBSD NetBSD 1.4.1
-
NetBSD SA2002-001-ptrace-1.4.patch
To apply this patch (as root, in the kernel src directory):# patch < /path/to/SA2002-001-ptrace-1.4.patchA new kernel must then be built/installed and the system must be rebooted.http://www.netbsd.org/Documentation/kernel/#how_to_build_a_kernel
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2002-001-ptrace-1.4 .patch
NetBSD NetBSD 1.4.2
-
NetBSD SA2002-001-ptrace-1.4.patch
To apply this patch (as root, in the kernel src directory):# patch < /path/to/SA2002-001-ptrace-1.4.patchA new kernel must then be built/installed and the system must be rebooted.http://www.netbsd.org/Documentation/kernel/#how_to_build_a_kernel
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2002-001-ptrace-1.4 .patch
NetBSD NetBSD 1.4.3
-
NetBSD SA2002-001-ptrace-1.4.patch
To apply this patch (as root, in the kernel src directory):# patch < /path/to/SA2002-001-ptrace-1.4.patchA new kernel must then be built/installed and the system must be rebooted.http://www.netbsd.org/Documentation/kernel/#how_to_build_a_kernel
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2002-001-ptrace-1.4 .patch
NetBSD NetBSD 1.5
-
NetBSD SA2002-001-ptrace-1.5.patch
To apply this patch (as root, in the kernel src directory):# patch < /path/to/SA2002-001-ptrace-1.5.patchA new kernel must then be built/installed and the system must be rebooted.http://www.netbsd.org/Documentation/kernel/#how_to_build_a_kernel
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2002-001-ptrace-1.5 .patch
NetBSD NetBSD 1.5.1
-
NetBSD SA2002-001-ptrace-1.5.patch
To apply this patch (as root, in the kernel src directory):# patch < /path/to/SA2002-001-ptrace-1.5.patchA new kernel must then be built/installed and the system must be rebooted.http://www.netbsd.org/Documentation/kernel/#how_to_build_a_kernel
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2002-001-ptrace-1.5 .patch
NetBSD NetBSD 1.5.2
-
NetBSD SA2002-001-ptrace-1.5.patch
To apply this patch (as root, in the kernel src directory):# patch < /path/to/SA2002-001-ptrace-1.5.patchA new kernel must then be built/installed and the system must be rebooted.http://www.netbsd.org/Documentation/kernel/#how_to_build_a_kernel
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2002-001-ptrace-1.5 .patch
FreeBSD FreeBSD 4.3 -RELEASE
-
FreeBSD exec-43R.patch
FreeBSD 4.3-RELEASE only.
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:08/exec-43R.patch
FreeBSD FreeBSD 4.3 -RELENG
-
FreeBSD exec.patch
For FreeBSD 4.4-STABLE, or RELENG_4_3 and RELENG_4_4 security branches.
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:08/exec.patch
FreeBSD FreeBSD 4.4
-
FreeBSD exec.patch
For FreeBSD 4.4-STABLE, or RELENG_4_3 and RELENG_4_4 security branches.
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:08/exec.patch
FreeBSD FreeBSD 4.4 -STABLE
-
FreeBSD exec.patch
For FreeBSD 4.4-STABLE, or RELENG_4_3 and RELENG_4_4 security branches.
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:08/exec.patch
FreeBSD FreeBSD 4.4 -RELENG
-
FreeBSD exec.patch
For FreeBSD 4.4-STABLE, or RELENG_4_3 and RELENG_4_4 security branches.
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:08/exec.patch