IWConfig Local ARGV Command Line Buffer Overflow Vulnerability

Bugtraq ID:	8901
Class:	Boundary Condition Error
CVE:	CVE-2003-0948
Remote:	No
Local:	Yes
Published:	Oct 27 2003 12:00AM
Updated:	Jul 11 2009 11:56PM
Credit:	Discovery credited to aXiS.
Vulnerable:	Wireless Tools For Linux Wireless Tools Version 26 Wireless Tools For Linux Wireless Tools Version 25 Wireless Tools For Linux Wireless Tools Version 24 Wireless Tools For Linux Wireless Tools Version 23 Wireless Tools For Linux Wireless Tools Version 22 Wireless Tools For Linux Wireless Tools Version 21 Wireless Tools For Linux Wireless Tools Version 20 Wireless Tools For Linux Wireless Tools Version 19
Not Vulnerable:

IWConfig Local ARGV Command Line Buffer Overflow Vulnerability

A problem has been identified in the iwconfig program when handling strings on the commandline. Because of this, a local attacker may be able to gain elevated privileges.

IWConfig Local ARGV Command Line Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IWConfig Local ARGV Command Line Buffer Overflow Vulnerability

References:

• Project Homepage (Wireless Tools For Linux)