Hylafax 'faxalter' Buffer Overflow Vulnerability
BID:765
Info
Hylafax 'faxalter' Buffer Overflow Vulnerability
| Bugtraq ID: | 765 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-1999-1340 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 03 1999 12:00AM |
| Updated: | Jul 11 2009 12:56AM |
| Credit: | This vulnerability was posted to the Bugtraq mailing list by Brock Tellier [email protected] on Wed, 03 Nov 1999. |
| Vulnerable: |
Hylafax Hylafax 4.0.2 |
| Not Vulnerable: | |
Discussion
Hylafax 'faxalter' Buffer Overflow Vulnerability
Hylafax is a popular fax server software package designed to run on multiple UNIX operating systems. Some versions of Hylafax ship with a vulnerable sub program 'faxalter'. This program is installed SUID UUCP and has a buffer overflow which if exploited will allow a malicious user to gain UUCP privileges.
Because the important programs are executed as root, such as Minicom (a popular modem terminal program) or cu(1) and are in the UUCP group and therefore writable by the same group they could be trojaned by the attacker. A successful scenario in this event would lead to a root compromise.
Hylafax is a popular fax server software package designed to run on multiple UNIX operating systems. Some versions of Hylafax ship with a vulnerable sub program 'faxalter'. This program is installed SUID UUCP and has a buffer overflow which if exploited will allow a malicious user to gain UUCP privileges.
Because the important programs are executed as root, such as Minicom (a popular modem terminal program) or cu(1) and are in the UUCP group and therefore writable by the same group they could be trojaned by the attacker. A successful scenario in this event would lead to a root compromise.
Exploit / POC
Solution / Fix
Hylafax 'faxalter' Buffer Overflow Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Hylafax 'faxalter' Buffer Overflow Vulnerability
References:
References:
- FreeBSD Security Information (FreeBSD)
- Hylafax Homepage (Hylafax)