BID:7943

Portmon Log File Option File Overwrite Vulnerability

Info

Portmon Log File Option File Overwrite Vulnerability

Bugtraq ID:	7943
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 17 2003 12:00AM
Updated:	Jun 17 2003 12:00AM
Credit:	Discovery credited to Luca Ercoli.
Vulnerable:	Portmon Portmon 1.8 Portmon Portmon 1.7 Portmon Portmon 1.6 Portmon Portmon 1.5 Portmon Portmon 1.4 Portmon Portmon 1.3 Portmon Portmon 1.2 Portmon Portmon 1.1 Portmon Portmon 1.0 Portmon Portmon 0.9 Portmon Portmon 0.8 Portmon Portmon 0.7 Portmon Portmon 0.6 Portmon Portmon 0.5 Portmon Portmon 0.4 Portmon Portmon 0.3 Portmon Portmon 0.2 Portmon Portmon 0.1

Not Vulnerable:	Portmon Portmon 1.9

Discussion

Portmon Log File Option File Overwrite Vulnerability

It has been reported that portmon does not properly handle writing to files. Because of this, portmon may corrupt files, resulting in a denial of service.

Exploit / POC

Portmon Log File Option File Overwrite Vulnerability

No exploit is required for this vulnerability.

Solution / Fix

Portmon Log File Option File Overwrite Vulnerability

Solution:
Portmon 1.9 has been released to address this issue. Users are advised to upgrade as soon as possible.

Portmon Portmon 1.0