OPIE Off By One Buffer Overflow Vulnerability and Local Privilege Escalation Vulnerability
BID:48390
Info
OPIE Off By One Buffer Overflow Vulnerability and Local Privilege Escalation Vulnerability
| Bugtraq ID: | 48390 |
| Class: | Unknown |
| CVE: |
CVE-2011-2489 CVE-2011-2490 |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 22 2011 12:00AM |
| Updated: | Jul 22 2011 05:30PM |
| Credit: | Sebastian Krahmer |
| Vulnerable: |
OPIE OPIE 0 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
OPIE OPIE 2.4 |
Discussion
OPIE Off By One Buffer Overflow Vulnerability and Local Privilege Escalation Vulnerability
OPIE is prone to an off-by-one buffer-overflow vulnerability and a local privilege-escalation vulnerability.
An attacker can exploit these issues to gain superuser privileges or execute arbitrary code with superuser privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.
OPIE is prone to an off-by-one buffer-overflow vulnerability and a local privilege-escalation vulnerability.
An attacker can exploit these issues to gain superuser privileges or execute arbitrary code with superuser privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
OPIE Off By One Buffer Overflow Vulnerability and Local Privilege Escalation Vulnerability
Currently, we are not aware of any working exploits If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
OPIE Off By One Buffer Overflow Vulnerability and Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
OPIE Off By One Buffer Overflow Vulnerability and Local Privilege Escalation Vulnerability
References:
References:
- Bug 698772 - VUL-0: opie: off by one errors in opiesu (Sebastian Krahmer)