Fake Identd Client Query Remote Buffer Overflow Vulnerability
BID:5351
Info
Fake Identd Client Query Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 5351 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 29 2002 12:00AM |
| Updated: | Jul 29 2002 12:00AM |
| Credit: | Reported by Jedi/Sector One <[email protected]>. |
| Vulnerable: |
Fake Identd Fake Identd 1.4 Fake Identd Fake Identd 1.3 Fake Identd Fake Identd 1.2 Fake Identd Fake Identd 1.1 Fake Identd Fake Identd 0.9 b Fake Identd Fake Identd 0.9 |
| Not Vulnerable: |
Fake Identd Fake Identd 1.5 |
Discussion
Fake Identd Client Query Remote Buffer Overflow Vulnerability
Fake Identd is an open source Ident server designed to return the same information to all incoming requests. It is implemented by Tomi Ollila, and available for Linux and a number of other Unix based operating systems.
Reportedly, some versions of Fake Identd fail to properly handle long client requests. A specially formatted request split across multiple TCP packets may cause an internal buffer to overflow. Reportedly, execution of arbitrary code as the Fake Identd server process is possible.
Fake Identd is an open source Ident server designed to return the same information to all incoming requests. It is implemented by Tomi Ollila, and available for Linux and a number of other Unix based operating systems.
Reportedly, some versions of Fake Identd fail to properly handle long client requests. A specially formatted request split across multiple TCP packets may cause an internal buffer to overflow. Reportedly, execution of arbitrary code as the Fake Identd server process is possible.
Exploit / POC
Fake Identd Client Query Remote Buffer Overflow Vulnerability
An exploit has been contributed by Jedi/Sector One <[email protected]>:
An exploit has been contributed by Jedi/Sector One <[email protected]>:
Solution / Fix
Fake Identd Client Query Remote Buffer Overflow Vulnerability
Solution:
Reportedly, this issue is fixed in Fake Identd 1.5:
Fake Identd Fake Identd 0.9
Fake Identd Fake Identd 0.9 b
Fake Identd Fake Identd 1.1
Fake Identd Fake Identd 1.2
Fake Identd Fake Identd 1.3
Fake Identd Fake Identd 1.4
Solution:
Reportedly, this issue is fixed in Fake Identd 1.5:
Fake Identd Fake Identd 0.9
-
Tomi Ollila identd.c
http://www.guru-group.fi/~too/sw/releases/identd.c
Fake Identd Fake Identd 0.9 b
-
Tomi Ollila identd.c
http://www.guru-group.fi/~too/sw/releases/identd.c
Fake Identd Fake Identd 1.1
-
Tomi Ollila identd.c
http://www.guru-group.fi/~too/sw/releases/identd.c
Fake Identd Fake Identd 1.2
-
Tomi Ollila identd.c
http://www.guru-group.fi/~too/sw/releases/identd.c
Fake Identd Fake Identd 1.3
-
Tomi Ollila identd.c
http://www.guru-group.fi/~too/sw/releases/identd.c
Fake Identd Fake Identd 1.4
-
Tomi Ollila identd.c
http://www.guru-group.fi/~too/sw/releases/identd.c
References
Fake Identd Client Query Remote Buffer Overflow Vulnerability
References:
References:
- Fake Identd Project Homepage (Tomi Ollila
)