eglibc Signedness Error Multiple Remote Code Execution Vulnerabilities
BID:48801
Info
eglibc Signedness Error Multiple Remote Code Execution Vulnerabilities
| Bugtraq ID: | 48801 |
| Class: | Unknown |
| CVE: |
CVE-2011-2702 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 20 2011 12:00AM |
| Updated: | Aug 01 2012 04:21PM |
| Credit: | c0ntex |
| Vulnerable: |
EGLIBC Consortium eglibc 2.14 |
| Not Vulnerable: | |
Discussion
eglibc Signedness Error Multiple Remote Code Execution Vulnerabilities
eglibc is prone to multiple remote code-execution vulnerabilities.
A successful exploit will result in the execution of arbitrary code in the context of the user running the affected application.
eglibc is prone to multiple remote code-execution vulnerabilities.
A successful exploit will result in the execution of arbitrary code in the context of the user running the affected application.
Exploit / POC
eglibc Signedness Error Multiple Remote Code Execution Vulnerabilities
The following proof-of-concept code is available:
The following proof-of-concept code is available:
Solution / Fix
eglibc Signedness Error Multiple Remote Code Execution Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
eglibc Signedness Error Multiple Remote Code Execution Vulnerabilities
References:
References:
- eglibc Homepage (EGLIBC Consortium)
- eglibc Signedness Error (c0ntex)
- Revision: #9649 svn: fsf/trunk/libc/sysdeps/i386/i686/multiarch/memcpy-ssse3.S (EGLIBC Consortium)