CVS CVE-2010-3846 RCS File Heap Buffer Overflow Vulnerability
BID:44528
Info
CVS CVE-2010-3846 RCS File Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 44528 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2010-3846 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 28 2010 12:00AM |
| Updated: | Apr 13 2015 09:59PM |
| Credit: | Jan Lieskovsky |
| Vulnerable: |
Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop 6 CVS CVS 1.11.23 |
| Not Vulnerable: | |
Discussion
CVS CVE-2010-3846 RCS File Heap Buffer Overflow Vulnerability
CVS is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input before copying it to an insufficiently sized buffer.
A local attacker can exploit this issue by storing a malicious RCS file in the CVS repository, and enticing an unsuspecting user to update their CVS repository tree with the file.
Successful exploitation allows the attacker to execute arbitrary code with the privileges of the user running the vulnerable application. Failed attempts will result in denial-of-service conditions.
CVS is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input before copying it to an insufficiently sized buffer.
A local attacker can exploit this issue by storing a malicious RCS file in the CVS repository, and enticing an unsuspecting user to update their CVS repository tree with the file.
Successful exploitation allows the attacker to execute arbitrary code with the privileges of the user running the vulnerable application. Failed attempts will result in denial-of-service conditions.
Solution / Fix
CVS CVE-2010-3846 RCS File Heap Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
CVS CVE-2010-3846 RCS File Heap Buffer Overflow Vulnerability
References:
References: