Mah-Jong Client/Server Remote sscanf() Buffer Overflow Vulnerability
BID:8557
Info
Mah-Jong Client/Server Remote sscanf() Buffer Overflow Vulnerability
| Bugtraq ID: | 8557 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2003-0705 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 07 2003 12:00AM |
| Updated: | Jul 11 2009 11:56PM |
| Credit: | Discovery of this vulnerability has been credited to Nicolas Boullis. |
| Vulnerable: |
Nicolas Boullis Mah-Jong 1.4 |
| Not Vulnerable: | |
Discussion
Mah-Jong Client/Server Remote sscanf() Buffer Overflow Vulnerability
A remote buffer overflow vulnerability when calling the sscanf() function has been reported to affect the mah-jong game client and server programs. The issue occurs within seperate source files, however the code used by both programs is identical. It should be noted that the bug must be triggered using different options depending on whether the target is a client or server.
This vulnerability can be exploited to execute arbitrary code with the privileges of the target client or server application.
A remote buffer overflow vulnerability when calling the sscanf() function has been reported to affect the mah-jong game client and server programs. The issue occurs within seperate source files, however the code used by both programs is identical. It should be noted that the bug must be triggered using different options depending on whether the target is a client or server.
This vulnerability can be exploited to execute arbitrary code with the privileges of the target client or server application.
Solution / Fix
Mah-Jong Client/Server Remote sscanf() Buffer Overflow Vulnerability
Solution:
Debian have released an advisory (DSA 378-1), which contains fixes to address this issue. Affected users are advised to upgrade as soon as possible. Further details regarding applying fixes are available in the referenced advisory.
Solution:
Debian have released an advisory (DSA 378-1), which contains fixes to address this issue. Affected users are advised to upgrade as soon as possible. Further details regarding applying fixes are available in the referenced advisory.
References
Mah-Jong Client/Server Remote sscanf() Buffer Overflow Vulnerability
References:
References: