Debian "super" Buffer Overflow Vulnerabilities
BID:397
Info
Debian "super" Buffer Overflow Vulnerabilities
| Bugtraq ID: | 397 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 26 1999 12:00AM |
| Updated: | Feb 26 1999 12:00AM |
| Credit: | First posted to BugTraq by William Deich <[email protected]> on February 26, 1999. |
| Vulnerable: |
Debian Linux 1.3.1 Debian Linux 1.3 |
| Not Vulnerable: |
Debian Linux 2.1 |
Discussion
Debian "super" Buffer Overflow Vulnerabilities
Super is an administration tool shipped with Debian Linux installed setuid root that is supposed to allow users to execute some commands as root. There are at least two known buffer overflow vulnerabilities in super which allow a regular user to smash the stack and execute arbitrary commands as root unrestricted. The consequences are a local root compromise.
Super is an administration tool shipped with Debian Linux installed setuid root that is supposed to allow users to execute some commands as root. There are at least two known buffer overflow vulnerabilities in super which allow a regular user to smash the stack and execute arbitrary commands as root unrestricted. The consequences are a local root compromise.
Exploit / POC
Debian "super" Buffer Overflow Vulnerabilities
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Debian "super" Buffer Overflow Vulnerabilities
Solution:
A user vulnerable to this attack is advised to either upgrade to Debian 2.1, remove the super suid privileges, or upgrade super itself. The fixed version (super 3.11.9) is available at the following locations:
ftp.ucolick.org:/pub/users/will/super-3.11.9.tar.gz
ftp.onshore.com:/pub/mirror/software/super
Also, for pure Debian users:
ftp://ftp.debian.org/debian/dists/potato/main/source/admin/super_3.11.7-1.diff.gz
ftp://ftp.debian.org/debian/dists/potato/main/source/admin/super_3.11.7-1.dsc
ftp://ftp.debian.org/debian/dists/potato/main/source/admin/super_3.11.6.orig.tar.gz
ftp://ftp.debian.org/debian/dists/potato/main/binary-i386/admin/super_3.11.7-1.deb
ftp://ftp.debian.org/debian/dists/potato/main/binary-m68k/admin/super_3.11.7-1.deb
ftp://ftp.debian.org/debian/dists/potato/main/binary-powerpc/admin/super_3.11.7-1.deb
Solution:
A user vulnerable to this attack is advised to either upgrade to Debian 2.1, remove the super suid privileges, or upgrade super itself. The fixed version (super 3.11.9) is available at the following locations:
ftp.ucolick.org:/pub/users/will/super-3.11.9.tar.gz
ftp.onshore.com:/pub/mirror/software/super
Also, for pure Debian users:
ftp://ftp.debian.org/debian/dists/potato/main/source/admin/super_3.11.7-1.diff.gz
ftp://ftp.debian.org/debian/dists/potato/main/source/admin/super_3.11.7-1.dsc
ftp://ftp.debian.org/debian/dists/potato/main/source/admin/super_3.11.6.orig.tar.gz
ftp://ftp.debian.org/debian/dists/potato/main/binary-i386/admin/super_3.11.7-1.deb
ftp://ftp.debian.org/debian/dists/potato/main/binary-m68k/admin/super_3.11.7-1.deb
ftp://ftp.debian.org/debian/dists/potato/main/binary-powerpc/admin/super_3.11.7-1.deb
References
Debian "super" Buffer Overflow Vulnerabilities
References:
References: