Ehud Gavron TrACESroute Terminator Function Format String Vulnerability
BID:4956
Info
Ehud Gavron TrACESroute Terminator Function Format String Vulnerability
| Bugtraq ID: | 4956 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 06 2002 12:00AM |
| Updated: | Jun 06 2002 12:00AM |
| Credit: | Vulnerability discovery credited to DownBload <[email protected]>. |
| Vulnerable: |
Ehud Gavron TrACESroute 6.1.1 Ehud Gavron TrACESroute 6.1 Ehud Gavron TrACESroute 6.0 |
| Not Vulnerable: | |
Discussion
Ehud Gavron TrACESroute Terminator Function Format String Vulnerability
A format string vulnerability exists in TrACESroute. The problem exists in the terminator (-T) function of the program. Due to improper use of the fprintf function, an attacker may be able to supply a malicious format string to the program that reults in writing of attacker-supplied values to arbitrary locations in memory.
A format string vulnerability exists in TrACESroute. The problem exists in the terminator (-T) function of the program. Due to improper use of the fprintf function, an attacker may be able to supply a malicious format string to the program that reults in writing of attacker-supplied values to arbitrary locations in memory.
Exploit / POC
Ehud Gavron TrACESroute Terminator Function Format String Vulnerability
The following exploit was provided by "thc \[@drug.org\]" <[email protected]> for TrACESroute 6.0 GOLD:
The following exploit was provided by "thc \[@drug.org\]" <[email protected]> for TrACESroute 6.0 GOLD:
Solution / Fix
Ehud Gavron TrACESroute Terminator Function Format String Vulnerability
Solution:
The vendor has released a fix which addresses this issue:
Ehud Gavron TrACESroute 6.0
Ehud Gavron TrACESroute 6.1
Ehud Gavron TrACESroute 6.1.1
Solution:
The vendor has released a fix which addresses this issue:
Ehud Gavron TrACESroute 6.0
-
Debian traceroute-nanog_6.0-2.2_alpha.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.0-2.2_alpha.deb -
Debian traceroute-nanog_6.0-2.2_arm.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.0-2.2_arm.deb -
Debian traceroute-nanog_6.0-2.2_i386.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.0-2.2_i386.deb -
Debian traceroute-nanog_6.0-2.2_m68k.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.0-2.2_m68k.deb -
Debian traceroute-nanog_6.0-2.2_powerpc.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.0-2.2_powerpc.deb -
Debian traceroute-nanog_6.0-2.2_sparc.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.0-2.2_sparc.deb -
Ehud Gavron traceroute.c
ftp://ftp.login.com/pub/software/traceroute/beta/
Ehud Gavron TrACESroute 6.1
-
Ehud Gavron traceroute.c
ftp://ftp.login.com/pub/software/traceroute/beta/
Ehud Gavron TrACESroute 6.1.1
-
Debian traceroute-nanog_6.1.1-1.2_alpha.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_alpha.deb -
Debian traceroute-nanog_6.1.1-1.2_arm.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_arm.deb -
Debian traceroute-nanog_6.1.1-1.2_hppa.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_hppa.deb -
Debian traceroute-nanog_6.1.1-1.2_i386.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_i386.deb -
Debian traceroute-nanog_6.1.1-1.2_ia64.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_ia64.deb -
Debian traceroute-nanog_6.1.1-1.2_m68k.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_m68k.deb -
Debian traceroute-nanog_6.1.1-1.2_mips.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_mips.deb -
Debian traceroute-nanog_6.1.1-1.2_mipsel.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_mipsel.deb -
Debian traceroute-nanog_6.1.1-1.2_powerpc.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_powerpc.deb -
Debian traceroute-nanog_6.1.1-1.2_s390.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_s390.deb -
Debian traceroute-nanog_6.1.1-1.2_sparc.deb
http://security.debian.org/pool/updates/main/t/traceroute-nanog/tracer oute-nanog_6.1.1-1.2_sparc.deb -
Ehud Gavron traceroute.c
ftp://ftp.login.com/pub/software/traceroute/beta/
References
Ehud Gavron TrACESroute Terminator Function Format String Vulnerability
References:
References: