BID:8039

Portmon USER Environment Variable Buffer Overrun Vulnerability

Info

Portmon USER Environment Variable Buffer Overrun Vulnerability

Bugtraq ID:	8039
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 26 2003 12:00AM
Updated:	Jun 26 2003 12:00AM
Credit:	The discoverer of this vulnerability is currently unknown.
Vulnerable:	Portmon Portmon 1.8 Portmon Portmon 1.7 Portmon Portmon 1.6 Portmon Portmon 1.5 Portmon Portmon 1.4 Portmon Portmon 1.3 Portmon Portmon 1.2 Portmon Portmon 1.1 Portmon Portmon 1.0

Not Vulnerable:	Portmon Portmon 1.9

Discussion

Portmon USER Environment Variable Buffer Overrun Vulnerability

A vulnerability has been discovered in Portmon version 1.8 and earlier. The problem occurs due to insufficient bounds checking performed before copying the USER environment variable into an internal memory buffer. This could allow a malicious local user to potentially corrupt Portmon memory, ultimately allowing for the execution of arbitrary code.

It should be noted that Portmon may not be installed setuid root by default, however a configuration option exists which allows an administrator to specify that the utility should in fact be installed setuid.

Exploit / POC

Portmon USER Environment Variable Buffer Overrun Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Portmon USER Environment Variable Buffer Overrun Vulnerability

Solution:
Portmon 1.9 has been released to address this issue. Users are advised to upgrade as soon as possible.

Portmon Portmon 1.0