HPUX Wall Message Buffer Overflow Vulnerability

Bugtraq ID:	6800
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Feb 07 2003 12:00AM
Updated:	Feb 07 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to Scotty <[email protected]>.
Vulnerable:	HP HP-UX 11.11 HP HP-UX 11.0 4 HP HP-UX 11.0 HP HP-UX 10.20
Not Vulnerable:

HPUX Wall Message Buffer Overflow Vulnerability

It has been reported that the HPUX wall executable may be prone to a buffer overflow condition. This buffer overflow is alleged to be triggered when an excessive amount of data is redirected into wall as a message intended to be broadcast.

It may be possible for remote attackers to corrupt sensitive regions of memory with attacker-supplied values, possibly resulting in execution of arbitrary code.

HPUX Wall Message Buffer Overflow Vulnerability

The following proof of concept was supplied by Scotty <[email protected]>:

perl -e 'print "A" x 9000' > /tmp/out
/usr/sbin/wall /tmp/out

HPUX Wall Message Buffer Overflow Vulnerability

Solution:
Fixes are available:


HP HP-UX 10.20

• HP PHCO_28717
  http://itrc.hp.com

HP HP-UX 11.0

• HP PHCO_28718
  http://itrc.hp.com

HP HP-UX 11.0 4

• HP PHCO_29085
  http://itrc.hp.com

HP HP-UX 11.11

• HP PHCO_28719
  http://itrc.hp.com

HPUX Wall Message Buffer Overflow Vulnerability

References:

• HPUX Wall Buffer Overflow (Scotty )