Accelerated X Buffer Overflow Vulnerabilities
BID:488
Info
Accelerated X Buffer Overflow Vulnerabilities
| Bugtraq ID: | 488 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 25 1999 12:00AM |
| Updated: | Jun 25 1999 12:00AM |
| Credit: | First posted to BugTraq in a KSR[T] advisory by KSR[T] Contact Account <[email protected]> on June 26, 1999. |
| Vulnerable: |
Xi Graphics Accelerated X 5.0 Xi Graphics Accelerated X 4.0 .x |
| Not Vulnerable: |
Xi Graphics Accelerated X 5.0.2 |
Discussion
Accelerated X Buffer Overflow Vulnerabilities
Accelerated-X, also known as Accel-X, is a popular commercial X server available from Xi Graphics. The servers are normally installed setuid root, and contain multiple buffer overflow vulnerabilities. These vulnerabilities were found in the passing of oversized command line arguments to the servers causing the stack to be overwritten and the flow of execution for the Xserver changed. Two of these vulnerabilities is known to be related to the -query argument and the DISPLAY environment variable, upon neither of which is bounds checking performed. The consequence of these vulnerabilities being exploited is local root compromise.
Accelerated-X, also known as Accel-X, is a popular commercial X server available from Xi Graphics. The servers are normally installed setuid root, and contain multiple buffer overflow vulnerabilities. These vulnerabilities were found in the passing of oversized command line arguments to the servers causing the stack to be overwritten and the flow of execution for the Xserver changed. Two of these vulnerabilities is known to be related to the -query argument and the DISPLAY environment variable, upon neither of which is bounds checking performed. The consequence of these vulnerabilities being exploited is local root compromise.