Linuxconf Local Environment Variable Buffer Overflow Vulnerability
BID:5585
Info
Linuxconf Local Environment Variable Buffer Overflow Vulnerability
| Bugtraq ID: | 5585 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2002-1506 CVE-1999-1327 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 28 2002 12:00AM |
| Updated: | Jul 11 2009 03:56PM |
| Credit: | Discovery of this vulnerability credited to Euan Briggs ([email protected]). |
| Vulnerable: |
Jacques Gelinas Linuxconf 1.28 r3 Jacques Gelinas Linuxconf 1.28 r2 Jacques Gelinas Linuxconf 1.28 r1 Jacques Gelinas Linuxconf 1.28 Jacques Gelinas Linuxconf 1.27 r5 Jacques Gelinas Linuxconf 1.27 r4 Jacques Gelinas Linuxconf 1.27 r3 Jacques Gelinas Linuxconf 1.27 Jacques Gelinas Linuxconf 1.2.4 r5 Jacques Gelinas Linuxconf 1.2.4 r4 Jacques Gelinas Linuxconf 1.2.4 r2 Jacques Gelinas Linuxconf 1.2.4 Jacques Gelinas Linuxconf 1.2.3 r2 Jacques Gelinas Linuxconf 1.2.3 r1 Jacques Gelinas Linuxconf 1.2.3 Jacques Gelinas Linuxconf 1.2.2 Jacques Gelinas Linuxconf 1.2.1 r8 Jacques Gelinas Linuxconf 1.2.1 r7 Jacques Gelinas Linuxconf 1.2.1 r6 Jacques Gelinas Linuxconf 1.2.1 r5 Jacques Gelinas Linuxconf 1.2.1 r4 Jacques Gelinas Linuxconf 1.2.1 r3 Jacques Gelinas Linuxconf 1.2.1 r2 Jacques Gelinas Linuxconf 1.2.1 r1 Jacques Gelinas Linuxconf 1.2.1 Jacques Gelinas Linuxconf 1.2 r2 Jacques Gelinas Linuxconf 1.2 r1 Jacques Gelinas Linuxconf 1.2 Jacques Gelinas Linuxconf 1.1.9 r2 Jacques Gelinas Linuxconf 1.1.9 r1 Jacques Gelinas Linuxconf 1.1.8 Jacques Gelinas Linuxconf 1.1.7 Jacques Gelinas Linuxconf 1.1.6 r10 |
| Not Vulnerable: |
Jacques Gelinas Linuxconf 1.28 r4 |
Exploit / POC
Linuxconf Local Environment Variable Buffer Overflow Vulnerability
CORE has developed a working commercial exploit for their IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
CORE has developed a working commercial exploit for their IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
References
Linuxconf Local Environment Variable Buffer Overflow Vulnerability
References:
References:
- Linuxconf Home Page (Jacques Gelinas)
- Linuxconf LINUXCONF_LANG overflow exploit (CORE Security)