BID:5626

Multiple AFD Working Directory Local Buffer Overflow Vulnerabilities

Info

Multiple AFD Working Directory Local Buffer Overflow Vulnerabilities

Bugtraq ID:	5626
Class:	Boundary Condition Error
CVE:	CVE-2002-1503
Remote:	No
Local:	Yes
Published:	Sep 04 2002 12:00AM
Updated:	Jul 11 2009 03:56PM
Credit:	Discovery of this issue is credited to the Netric Security Team.
Vulnerable:	AFD AFD 1.2.14 AFD AFD 1.2.13 AFD AFD 1.2.12 AFD AFD 1.2.11 AFD AFD 1.2.10 AFD AFD 1.2.9 AFD AFD 1.2.8 AFD AFD 1.2.7 AFD AFD 1.2.6 AFD AFD 1.2.5 AFD AFD 1.2.4 AFD AFD 1.2.3 AFD AFD 1.2.2 AFD AFD 1.2.1 AFD AFD 1.2

Not Vulnerable:	AFD AFD 1.2.15

Discussion

Multiple AFD Working Directory Local Buffer Overflow Vulnerabilities

AFD (Automatic File Distributor) is prone to a number of locally exploitable stack and heap based buffer overflow conditions. These issues are all related to insufficient bounds checking of externally supplied values for the working directory, either via the command line or through an environment variable.

A number of the vulnerable AFD binaries are installed setuid root and may potentially be exploited by a local attacker to execute arbitrary code as root.

Exploit / POC

Multiple AFD Working Directory Local Buffer Overflow Vulnerabilities

The following exploit was provided by eSDee of Netric:

/data/vulnerabilities/exploits/netric-afd-exploit.c

Solution / Fix

Multiple AFD Working Directory Local Buffer Overflow Vulnerabilities

Solution:
The vendor has addressed this issue in AFD versions 1.2.15 and later. Those affected by this vulnerability are advised to upgrade.

AFD AFD 1.2