Usagi Project mipv6-daemon ND Options Remote Buffer Overflow Vulnerability

Bugtraq ID:	41522
Class:	Boundary Condition Error
CVE:	CVE-2010-2523
Remote:	Yes
Local:	No
Published:	Jul 06 2010 12:00AM
Updated:	Apr 13 2015 10:19PM
Credit:	Sebastian Krahmer
Vulnerable:	Usagi Project mipv6-daemon 6 SuSE SUSE Linux Enterprise 11 SP1 SuSE SUSE Linux Enterprise 11 S.u.S.E. openSUSE 11.3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1
Not Vulnerable:

Usagi Project mipv6-daemon ND Options Remote Buffer Overflow Vulnerability

mipv6-daemon is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successfully exploiting this issue can allow an attacker to execute arbitrary code in the context of the application. Failed exploit attempts will likely crash the application.

Usagi Project mipv6-daemon ND Options Remote Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Usagi Project mipv6-daemon ND Options Remote Buffer Overflow Vulnerability

Solution:
Updates are available; please see the references for more information.

Usagi Project mipv6-daemon ND Options Remote Buffer Overflow Vulnerability

References:

• patch for remote buffer overflows and local message spoofing in mipv6 daemon (Sebastian Krahmer)
  
• USAGI Project - Linux IPv6 Development Project Homepage (USAGI Project)