TerminatorX Multiple Command-Line and Environment Buffer Overrun Vulnerabilities

Bugtraq ID:	8993
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 07 2003 12:00AM
Updated:	Nov 07 2003 12:00AM
Credit:	The discovery of this vulnerability has been credited to "c0wboy@0x333" <[email protected]>.
Vulnerable:	terminatorX terminatorX 3.81
Not Vulnerable:

TerminatorX Multiple Command-Line and Environment Buffer Overrun Vulnerabilities

It has been reported that TerminatorX may be prone to multiple vulnerabilities when handling command-line and environment variable data. As a result, an attacker may be capable of exploiting the application in a variety of ways to execute arbitrary code with elevated privileges. It should be noted that TerminatorX is not installed setuid by default, however the author recommends that users make the application setuid root.

TerminatorX Multiple Command-Line and Environment Buffer Overrun Vulnerabilities

Exploit code has been released and is available below:

• /data/vulnerabilities/exploits/gEEk-terminatorX.c
• /data/vulnerabilities/exploits/terminatorx-exp.c
• /data/vulnerabilities/exploits/FBHterminator.c
• /data/vulnerabilities/exploits/termx_exp.c

TerminatorX Multiple Command-Line and Environment Buffer Overrun Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

TerminatorX Multiple Command-Line and Environment Buffer Overrun Vulnerabilities

References:

• Project Homepage (terminatorX)
  
• Local PoC exploit terminatorX v3.81 ("demz" )
  
• terminatorX stack-based overflow (exploit) (li0n7 )