Musicqueue Multiple Buffer Overrun Vulnerabilities
BID:8903
Info
Musicqueue Multiple Buffer Overrun Vulnerabilities
| Bugtraq ID: | 8903 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 27 2003 12:00AM |
| Updated: | Oct 27 2003 12:00AM |
| Credit: | This vulnerability was discovered by dong-h0un U <[email protected]>. |
| Vulnerable: |
Musicqueue Musicqueue 1.1.1 Musicqueue Musicqueue 1.1 Musicqueue Musicqueue 1.0 Musicqueue Musicqueue 0.9.2 Musicqueue Musicqueue 0.9.1 Musicqueue Musicqueue 0.9 |
| Not Vulnerable: | |
Discussion
Musicqueue Multiple Buffer Overrun Vulnerabilities
Multiple buffer overrun vulnerabilities have been discovered in Musicqueue. Both issues stem from the lack of bounds checking when passing user-supplied input to the sprintf() libc function. As a result, it may be possible for an attacker to exploit arbitrary code with the privileges the affected application, possibly installed suid or sgid.
Multiple buffer overrun vulnerabilities have been discovered in Musicqueue. Both issues stem from the lack of bounds checking when passing user-supplied input to the sprintf() libc function. As a result, it may be possible for an attacker to exploit arbitrary code with the privileges the affected application, possibly installed suid or sgid.
Exploit / POC
Musicqueue Multiple Buffer Overrun Vulnerabilities
An exploit has been developed by dong-h0un U <[email protected]>.
An exploit has been developed by dong-h0un U <[email protected]>.
References
Musicqueue Multiple Buffer Overrun Vulnerabilities
References:
References:
- Musicqueue Homepage (Musicqueue)
- Musicqueue multiple local vulnerabilities (dong-h0un U