AMANDA amcheck Local Buffer Overflow Vulnerability
BID:4840
Info
AMANDA amcheck Local Buffer Overflow Vulnerability
| Bugtraq ID: | 4840 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2002-0901 |
| Remote: | No |
| Local: | Yes |
| Published: | May 27 2002 12:00AM |
| Updated: | Jul 11 2009 01:56PM |
| Credit: | Discovery of this issue is credited to zillion <[email protected]>. |
| Vulnerable: |
AMANDA AMANDA 2.3 .0.4 |
| Not Vulnerable: | |
Discussion
AMANDA amcheck Local Buffer Overflow Vulnerability
The AMANDA amcheck component is prone to a locally exploitable buffer overflow condition. The amcheck utility is installed setuid root by default. This may allow some local attackers to execute arbitrary instructions to gain root privileges, and is the result of insufficient bounds checking when processing command line input. It should be noted that the amcheck may only be executed by the user/group operator (on FreeBSD).
The AMANDA amcheck component is prone to a locally exploitable buffer overflow condition. The amcheck utility is installed setuid root by default. This may allow some local attackers to execute arbitrary instructions to gain root privileges, and is the result of insufficient bounds checking when processing command line input. It should be noted that the amcheck may only be executed by the user/group operator (on FreeBSD).