GNU Screen Braille Module Buffer Overflow Vulnerability

Bugtraq ID:	4578
Class:	Boundary Condition Error
CVE:	CVE-2002-1602
Remote:	No
Local:	Yes
Published:	Apr 23 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Vulnerability discovery credited to Gobbles Security.
Vulnerable:	GNU screen 3.9.11 - Caldera OpenLinux Server 3.1.1 - Caldera OpenLinux Workstation 3.1.1 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - FreeBSD FreeBSD 4.5 -STABLE - FreeBSD FreeBSD 4.5 -RELEASE - FreeBSD FreeBSD 4.5 - FreeBSD FreeBSD 4.4 -STABLE - FreeBSD FreeBSD 4.4 -RELENG - FreeBSD FreeBSD 4.4 - FreeBSD FreeBSD 4.3 -STABLE - FreeBSD FreeBSD 4.3 -RELENG - FreeBSD FreeBSD 4.3 -RELEASE - FreeBSD FreeBSD 4.3 - HP HP-UX 11.20 - HP HP-UX 11.11 - HP HP-UX 11.0 - HP HP-UX 10.20 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + MandrakeSoft Multi Network Firewall 2.0 + Mandriva Linux Mandrake 9.0 - Mandriva Linux Mandrake 8.2 - Mandriva Linux Mandrake 8.1 ia64 - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 ppc - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - NetBSD NetBSD 1.5.2 - NetBSD NetBSD 1.5.1 - NetBSD NetBSD 1.5 - OpenBSD OpenBSD 2.9 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.6 - OpenBSD OpenBSD 3.0 - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.2 alpha - Redhat Linux 7.1 ia64 - Redhat Linux 7.1 i386 - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha - Slackware Linux 8.0 - Slackware Linux 7.1 - Sun Solaris 8_x86 - Sun Solaris 8_sparc - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.1 - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha - SuSE Linux 6.4 ppc - SuSE Linux 6.4 i386 - SuSE Linux 6.4 alpha GNU screen 3.9.10 - Caldera OpenLinux Server 3.1.1 - Caldera OpenLinux Workstation 3.1.1 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - FreeBSD FreeBSD 4.5 -STABLE - FreeBSD FreeBSD 4.5 -RELEASE - FreeBSD FreeBSD 4.5 - FreeBSD FreeBSD 4.4 -STABLE - FreeBSD FreeBSD 4.4 -RELENG - FreeBSD FreeBSD 4.4 - FreeBSD FreeBSD 4.3 -STABLE - FreeBSD FreeBSD 4.3 -RELENG - FreeBSD FreeBSD 4.3 -RELEASE - FreeBSD FreeBSD 4.3 - HP HP-UX 11.20 - HP HP-UX 11.11 - HP HP-UX 11.0 - HP HP-UX 10.20 - Mandriva Linux Mandrake 8.2 - Mandriva Linux Mandrake 8.1 ia64 - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 ppc - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - NetBSD NetBSD 1.5.2 - NetBSD NetBSD 1.5.1 - NetBSD NetBSD 1.5 - OpenBSD OpenBSD 2.9 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.6 - OpenBSD OpenBSD 3.0 - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.2 alpha - Redhat Linux 7.1 ia64 - Redhat Linux 7.1 i386 - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha + SCO OpenLinux Server 3.1.1 + SCO OpenLinux Workstation 3.1.1 - Slackware Linux 8.0 - Slackware Linux 7.1 - Sun Solaris 8_x86 - Sun Solaris 8_sparc - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.1 - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha - SuSE Linux 6.4 ppc - SuSE Linux 6.4 i386 - SuSE Linux 6.4 alpha GNU screen 3.9.9 - Caldera OpenLinux Server 3.1.1 - Caldera OpenLinux Workstation 3.1.1 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - FreeBSD FreeBSD 4.5 -STABLE - FreeBSD FreeBSD 4.5 -RELEASE - FreeBSD FreeBSD 4.5 - FreeBSD FreeBSD 4.4 -STABLE - FreeBSD FreeBSD 4.4 -RELENG - FreeBSD FreeBSD 4.4 - FreeBSD FreeBSD 4.3 -STABLE - FreeBSD FreeBSD 4.3 -RELENG - FreeBSD FreeBSD 4.3 -RELEASE - FreeBSD FreeBSD 4.3 - HP HP-UX 11.20 - HP HP-UX 11.11 - HP HP-UX 11.0 - HP HP-UX 10.20 - Mandriva Linux Mandrake 8.2 - Mandriva Linux Mandrake 8.1 ia64 - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 ppc - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - NetBSD NetBSD 1.5.2 - NetBSD NetBSD 1.5.1 - NetBSD NetBSD 1.5 - OpenBSD OpenBSD 2.9 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.6 - OpenBSD OpenBSD 3.0 - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.2 alpha - Redhat Linux 7.1 ia64 - Redhat Linux 7.1 i386 - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha - Slackware Linux 8.0 - Slackware Linux 7.1 - Sun Solaris 8_x86 - Sun Solaris 8_sparc - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.1 - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha - SuSE Linux 6.4 ppc - SuSE Linux 6.4 i386 - SuSE Linux 6.4 alpha GNU screen 3.9.8 - Caldera OpenLinux Server 3.1.1 - Caldera OpenLinux Workstation 3.1.1 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - FreeBSD FreeBSD 4.5 -STABLE - FreeBSD FreeBSD 4.5 -RELEASE - FreeBSD FreeBSD 4.5 - FreeBSD FreeBSD 4.4 -STABLE - FreeBSD FreeBSD 4.4 -RELENG - FreeBSD FreeBSD 4.4 - FreeBSD FreeBSD 4.3 -STABLE - FreeBSD FreeBSD 4.3 -RELENG - FreeBSD FreeBSD 4.3 -RELEASE - FreeBSD FreeBSD 4.3 - HP HP-UX 11.20 - HP HP-UX 11.11 - HP HP-UX 11.0 - HP HP-UX 10.20 - Mandriva Linux Mandrake 8.2 - Mandriva Linux Mandrake 8.1 ia64 - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 ppc - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - NetBSD NetBSD 1.5.2 - NetBSD NetBSD 1.5.1 - NetBSD NetBSD 1.5 - OpenBSD OpenBSD 2.9 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.6 - OpenBSD OpenBSD 3.0 - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.2 alpha - Redhat Linux 7.1 ia64 - Redhat Linux 7.1 i386 - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha - Slackware Linux 8.0 - Slackware Linux 7.1 - Sun Solaris 8_x86 - Sun Solaris 8_sparc - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.1 - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha - SuSE Linux 6.4 ppc - SuSE Linux 6.4 i386 - SuSE Linux 6.4 alpha GNU screen 3.9.4 - Caldera OpenLinux Server 3.1.1 - Caldera OpenLinux Workstation 3.1.1 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - FreeBSD FreeBSD 4.5 -STABLE - FreeBSD FreeBSD 4.5 -RELEASE - FreeBSD FreeBSD 4.5 - FreeBSD FreeBSD 4.4 -STABLE - FreeBSD FreeBSD 4.4 -RELENG - FreeBSD FreeBSD 4.4 - FreeBSD FreeBSD 4.3 -STABLE - FreeBSD FreeBSD 4.3 -RELENG - FreeBSD FreeBSD 4.3 -RELEASE - FreeBSD FreeBSD 4.3 - HP HP-UX 11.20 - HP HP-UX 11.11 - HP HP-UX 11.0 - HP HP-UX 10.20 - Mandriva Linux Mandrake 8.2 - Mandriva Linux Mandrake 8.1 ia64 - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 ppc - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - NetBSD NetBSD 1.5.2 - NetBSD NetBSD 1.5.1 - NetBSD NetBSD 1.5 - OpenBSD OpenBSD 2.9 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.6 - OpenBSD OpenBSD 3.0 - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.2 alpha - Redhat Linux 7.1 ia64 - Redhat Linux 7.1 i386 - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha - Slackware Linux 8.0 - Slackware Linux 7.1 - Sun Solaris 8_x86 - Sun Solaris 8_sparc - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.1 - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha - SuSE Linux 6.4 ppc - SuSE Linux 6.4 i386 - SuSE Linux 6.4 alpha
Not Vulnerable:

GNU Screen Braille Module Buffer Overflow Vulnerability

This exploit contributed by GOBBLES Security.

• /data/vulnerabilities/exploits/GOBBLES-own-screen.c

GNU Screen Braille Module Buffer Overflow Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.