Qstat Buffer Overflow Vulnerability
BID:65
Info
Qstat Buffer Overflow Vulnerability
| Bugtraq ID: | 65 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | Unknown |
| Published: | Apr 07 1998 12:00AM |
| Updated: | Apr 07 1998 12:00AM |
| Credit: | The vulnerability was published as "Quake again: qstat: minor flaw" by Chris Evans <[email protected]> to the BugTraq mailing list on April 7, 1998. |
| Vulnerable: |
Steve Jankowski qstat 2.0 b |
| Not Vulnerable: | |
Discussion
Qstat Buffer Overflow Vulnerability
There exists a buffer overflow in the qstat program. qsat is a commonly used program for querying the status of remote Quake servers. It runs on several platforms and is also the backend behind some GUI Quake query tools.
The risk is not as high as the vulnerability is only exploitable when the "-old" flag is given. The program defaults to not using this flag.
The effending section of code:
char name[100]
....
sprintf( name, "\"%s\"", server->server_name);
server->server_name is a dynamically allocated string, and its content and length are under the control of the remote quake server. This or similar vulnerabilities may exist in older versions of the software.
There exists a buffer overflow in the qstat program. qsat is a commonly used program for querying the status of remote Quake servers. It runs on several platforms and is also the backend behind some GUI Quake query tools.
The risk is not as high as the vulnerability is only exploitable when the "-old" flag is given. The program defaults to not using this flag.
The effending section of code:
char name[100]
....
sprintf( name, "\"%s\"", server->server_name);
server->server_name is a dynamically allocated string, and its content and length are under the control of the remote quake server. This or similar vulnerabilities may exist in older versions of the software.
Exploit / POC
Qstat Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Qstat Buffer Overflow Vulnerability
References:
References: