Coda Filesystem Kernel Module IOCTL Information Disclosure Vulnerability

Bugtraq ID:	42479
Class:	Boundary Condition Error
CVE:	CVE-2010-3014
Remote:	No
Local:	Yes
Published:	Aug 16 2010 12:00AM
Updated:	Mar 19 2015 08:13AM
Credit:	Dan Rosenberg
Vulnerable:	NetBSD NetBSD 5.0.2 NetBSD NetBSD 5.0.1 NetBSD NetBSD 4.0.1 NetBSD NetBSD Current NetBSD NetBSD 5.0 NetBSD NetBSD 4.0 Carnegie Mellon University Coda 6.9.4
Not Vulnerable:

Coda Filesystem Kernel Module IOCTL Information Disclosure Vulnerability

The Coda filesystem kernel module is prone to a local information-disclosure vulnerability because it fails to properly validate user-supplied input.

Successful exploits will allow attackers to read sensitive kernel heap-based memory. Due to the nature of this issue, arbitrary code execution may be possible; this has not been confirmed.

Coda 6.9.4 on FreeBSD and NetBSD platforms is vulnerable; other versions may also be affected.

Coda Filesystem Kernel Module IOCTL Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Coda Filesystem Kernel Module IOCTL Information Disclosure Vulnerability

Solution:
Updates are available; please see the references for more information.

Coda Filesystem Kernel Module IOCTL Information Disclosure Vulnerability

References:

• Coda Filesystem Homepage (Carnegie Mellon University)
  
• Coda Filesystem Kernel Memory Disclosure (Dan Rosenberg)
  
• Revision 1.76 (NetBSD)
  
• Revision 210997 (rwatson)
  
• CVE-2010-3014: Coda Filesystem Kernel Memory Disclosure (VSR Advisories )