RPM Package Manager FTP NLST Data Integer Overflow Remote Memory Corruption Vulnerability
BID:7874
Info
RPM Package Manager FTP NLST Data Integer Overflow Remote Memory Corruption Vulnerability
| Bugtraq ID: | 7874 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 11 2003 12:00AM |
| Updated: | Jun 11 2003 12:00AM |
| Credit: | This vulnerability was reported by [email protected]. |
| Vulnerable: |
RPM RPM Package Manager 4.1 |
| Not Vulnerable: | |
Discussion
RPM Package Manager FTP NLST Data Integer Overflow Remote Memory Corruption Vulnerability
A vulnerability has been reported for the RPM Package Manager. The problem occurs when using the utility to access FTP listings on a remote server. It has been reported that when processing NLST data from the server, RPM fails to sufficiently handle the size of data returned. Due to subsequent calculations, insufficient data may be allocated for storage of the NLST data. This may result in excessive data being copied into insufficient memory.
It should be noted that this issue presents itself when NLST data in excess of 1 gigabyte is received. As such, exploitation of this issue will inevitabely result in the exhaustion of available resources, followed by a segmentation violation. Also, due to the excessive amount of data copied to, the exploitability of this issue to execute code may not be plausible.
A vulnerability has been reported for the RPM Package Manager. The problem occurs when using the utility to access FTP listings on a remote server. It has been reported that when processing NLST data from the server, RPM fails to sufficiently handle the size of data returned. Due to subsequent calculations, insufficient data may be allocated for storage of the NLST data. This may result in excessive data being copied into insufficient memory.
It should be noted that this issue presents itself when NLST data in excess of 1 gigabyte is received. As such, exploitation of this issue will inevitabely result in the exhaustion of available resources, followed by a segmentation violation. Also, due to the excessive amount of data copied to, the exploitability of this issue to execute code may not be plausible.
Exploit / POC
RPM Package Manager FTP NLST Data Integer Overflow Remote Memory Corruption Vulnerability
No exploit required.
No exploit required.
Solution / Fix
RPM Package Manager FTP NLST Data Integer Overflow Remote Memory Corruption Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.