CA-MLink MLLock Command Line Buffer Overflow Vulnerability

Bugtraq ID:	4441
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Apr 05 2002 12:00AM
Updated:	Apr 05 2002 12:00AM
Credit:	Vulnerability discovery credited to KF <[email protected]>.
Vulnerable:	Computer Associates CA-MLINK - AT&T SVR4 4.0 - HP HP-UX 9.0 - IBM AIX 4.3 - IBM OS/2 Warp Server 4 - SCO Open Server 5.0.6 a - SCO Open Server 5.0.6 - SCO Open Server 5.0.5 - SCO Open Server 5.0.4 - SCO Open Server 5.0.3 - SCO Open Server 5.0.2 - SCO Open Server 5.0.1 - SCO Open Server 5.0 - Sun Solaris 2.4 - Sun Solaris 2.3 - Sun Solaris 2.2 - Sun Solaris 2.1 - Sun Solaris 2.0 - Sun SunOS 4.1.4 - Sun SunOS 4.1.3 - Sun SunOS 4.1.2 - Sun SunOS 4.1.1
Not Vulnerable:

CA-MLink MLLock Command Line Buffer Overflow Vulnerability

CA-MLINK is a data transport management system distributed and maintained by Computer Associates. It is designed for use on the Unix and Microsoft Windows platforms.

The mllock program does not perform adequate bounds checking. Because of this, it is possible to create a buffer overflow on the command line by supplying an arbitrarily long argv. This could result in the overwriting of stack variables, including the return address, and the execution of arbitrary code.

CA-MLink MLLock Command Line Buffer Overflow Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

CA-MLink MLLock Command Line Buffer Overflow Vulnerability

Solution:
A fix is available:


Computer Associates CA-MLINK

• Computer Associates mlink13.tar
  ftp://ftp.ca.com/caproducts/unicenter/mlink/mlink.13/mlink13.tar