XShisen 'XSHISENLIB' Local Buffer Overflow Vulnerability
BID:8776
Info
XShisen 'XSHISENLIB' Local Buffer Overflow Vulnerability
| Bugtraq ID: | 8776 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 06 2003 12:00AM |
| Updated: | Oct 06 2003 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
XShisen XShisen 1.5.1 |
| Not Vulnerable: | |
Discussion
XShisen 'XSHISENLIB' Local Buffer Overflow Vulnerability
A local buffer overflow vulnerabality has been reported to exist in XShisen due to improper handling of user-supplied data. The problem is reportedly caused by 'XSHISENLIB' environment variable. It may be possible to cause a buffer overflow condition by supplying more than 100 bytes of data.
Successful exploitation may allow an attacker to ultimately execute arbitrary code in the context of the user who is running the vulnerable software in order to gain unauthorized access to a system.
XShisen version 1.51 has been reported to be prone to these issue however other versions may be affected as well.
A local buffer overflow vulnerabality has been reported to exist in XShisen due to improper handling of user-supplied data. The problem is reportedly caused by 'XSHISENLIB' environment variable. It may be possible to cause a buffer overflow condition by supplying more than 100 bytes of data.
Successful exploitation may allow an attacker to ultimately execute arbitrary code in the context of the user who is running the vulnerable software in order to gain unauthorized access to a system.
XShisen version 1.51 has been reported to be prone to these issue however other versions may be affected as well.
Exploit / POC
XShisen 'XSHISENLIB' Local Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
XShisen 'XSHISENLIB' Local Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.