MTR Buffer Overflow Vulnerability
BID:4217
Info
MTR Buffer Overflow Vulnerability
| Bugtraq ID: | 4217 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 27 2002 12:00AM |
| Updated: | Feb 27 2002 12:00AM |
| Credit: | This vulnerability credited to Damian Gryski <[email protected]>. |
| Vulnerable: |
mtr mtr 0.46 mtr mtr 0.45 mtr mtr 0.41 |
| Not Vulnerable: |
mtr mtr 0.47 |
Discussion
MTR Buffer Overflow Vulnerability
MTR is a freely available, open source program for tracerouting and pinging remote hosts. It is freely available, and open source.
A buffer overflow exists in MTR. The problem is due to insufficient bounds checking on operations using the MTR_OPTIONS environment variable. This overflow could lead to the corruption of stack variables and could result in the execution of attacker-supplied code.
This program is setuid root, and may therefore make it possible for an attacker to elevate privileges if exploited successfully.
MTR is a freely available, open source program for tracerouting and pinging remote hosts. It is freely available, and open source.
A buffer overflow exists in MTR. The problem is due to insufficient bounds checking on operations using the MTR_OPTIONS environment variable. This overflow could lead to the corruption of stack variables and could result in the execution of attacker-supplied code.
This program is setuid root, and may therefore make it possible for an attacker to elevate privileges if exploited successfully.
Exploit / POC
Solution / Fix
MTR Buffer Overflow Vulnerability
Solution:
Fixes available:
mtr mtr 0.41
mtr mtr 0.45
mtr mtr 0.46
Solution:
Fixes available:
mtr mtr 0.41
-
Debian mtr_0.41-6_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/mtr_ 0.41-6_alpha.deb -
Debian mtr_0.41-6_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/mtr_0. 41-6_arm.deb -
Debian mtr_0.41-6_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/mtr_0 .41-6_i386.deb -
Debian mtr_0.41-6_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/mtr_0 .41-6_m68k.deb -
Debian mtr_0.41-6_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/mt r_0.41-6_powerpc.deb -
Debian mtr_0.41-6_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/mtr_ 0.41-6_sparc.deb
mtr mtr 0.45
-
mtr mtr-0.47.tar.gz
ftp://ftp.bitwizard.nl/mtr/mtr-0.47.tar.gz
mtr mtr 0.46
-
mtr mtr-0.47.tar.gz
ftp://ftp.bitwizard.nl/mtr/mtr-0.47.tar.gz