Central Command Vexira Antivirus Buffer Overflow Vulnerability

Bugtraq ID:	7383
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Apr 18 2003 12:00AM
Updated:	Apr 18 2003 12:00AM
Credit:	Discovery of this vulnerability credited to Luca Ercoli <[email protected]>.
Vulnerable:	Central Command Vexira Antivirus for Linux 2.1.7
Not Vulnerable:	Central Command Vexira Antivirus for Linux 2.1.7 .21

Central Command Vexira Antivirus Buffer Overflow Vulnerability

A buffer overflow vulnerability has been discovered in Vexira Antivirus which may result in privilege escalation.

An attacker can exploit this vulnerability by supplying an overly long commandline argument to the vexira binary. This will trigger the condition and cause the binary to crash.

Central Command Vexira Antivirus Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Central Command Vexira Antivirus Buffer Overflow Vulnerability

Solution:
The vendor has addressed this issue in version 2.1.7.21 of Vexira Antivirus. Users are advised to upgrade by issuing the following command:

vexira --update

Central Command Vexira Antivirus Buffer Overflow Vulnerability

References:

• Vexira Antivirus for Linux (Central Command)