Canna subsystem 'canuum' Buffer Overflow Vulnerability
BID:758
Info
Canna subsystem 'canuum' Buffer Overflow Vulnerability
| Bugtraq ID: | 758 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 02 1999 12:00AM |
| Updated: | Nov 02 1999 12:00AM |
| Credit: | This vulnerability was discovered by UNYUN <[email protected]> and initially posted to Bugtraq-JP (Japanese). They were reposted to Bugtraq in English on Tue, 02 Nov 1999 |
| Vulnerable: |
Turbolinux Turbolinux 3.5 b2 |
| Not Vulnerable: | |
Discussion
Canna subsystem 'canuum' Buffer Overflow Vulnerability
Canna is a Japanese input system available as free software. Canna provides a unified user interface for inputting Japanese.
Canna supports Nemacs(Mule), kinput2 and canuum. All of these tools can be used by a single customization file, romaji-to-kana conversion rules and conversion dictionaries, and input Japanese in the same way.
Canna converts kana to kanji based on a client-server model and supports automatic kana-to-kanji conversion.
The Canna subsystem on certain UNIX versions contains a buffer overflow in the 'canuum' program. Canuum is a Japanese input tty frontend for Canna using uum. Certain versions have a buffer overflow via unchecked user supplied data in the -k,-c,-n options.
Since this program is installed SUID root this attack will result in a root level compromise.
Canna is a Japanese input system available as free software. Canna provides a unified user interface for inputting Japanese.
Canna supports Nemacs(Mule), kinput2 and canuum. All of these tools can be used by a single customization file, romaji-to-kana conversion rules and conversion dictionaries, and input Japanese in the same way.
Canna converts kana to kanji based on a client-server model and supports automatic kana-to-kanji conversion.
The Canna subsystem on certain UNIX versions contains a buffer overflow in the 'canuum' program. Canuum is a Japanese input tty frontend for Canna using uum. Certain versions have a buffer overflow via unchecked user supplied data in the -k,-c,-n options.
Since this program is installed SUID root this attack will result in a root level compromise.
Solution / Fix
Canna subsystem 'canuum' Buffer Overflow Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Canna subsystem 'canuum' Buffer Overflow Vulnerability
References:
References:
- eEye Digital Security Team Home Page (eEye)
- Penguin Toolbox #54: EmailClub (Shadow Penguin Security)
- TurboLinux Support (TurboLinux)