Conquest Unspecified Local Environment Variable Buffer Overflow Vulnerability
BID:8996
Info
Conquest Unspecified Local Environment Variable Buffer Overflow Vulnerability
| Bugtraq ID: | 8996 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2003-0933 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 10 2003 12:00AM |
| Updated: | Jul 12 2009 12:56AM |
| Credit: | Discovery of this vulnerability has been credited to Steve Kemp. |
| Vulnerable: |
Conquest Conquest 7.1.1 -6 |
| Not Vulnerable: | |
Discussion
Conquest Unspecified Local Environment Variable Buffer Overflow Vulnerability
A local buffer overrun vulnerability has been reported for conquest. The problem occurs due to insufficient bounds checking when parsing data contained in the user's environment. As a result, an attacker may be capable of controlling the execution flow of the conquest program and effectively executing arbitrary code with elevated privileges.
A local buffer overrun vulnerability has been reported for conquest. The problem occurs due to insufficient bounds checking when parsing data contained in the user's environment. As a result, an attacker may be capable of controlling the execution flow of the conquest program and effectively executing arbitrary code with elevated privileges.
Exploit / POC
Conquest Unspecified Local Environment Variable Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Conquest Unspecified Local Environment Variable Buffer Overflow Vulnerability
Solution:
Debian has released an advisory (DSA 398-1) and fixes to address this issue. Affected users are advised to apply these fixes as soon as possible. Further information regarding obtaining and applying these fixes is available in the referenced advisory.
Solution:
Debian has released an advisory (DSA 398-1) and fixes to address this issue. Affected users are advised to apply these fixes as soon as possible. Further information regarding obtaining and applying these fixes is available in the referenced advisory.
References
Conquest Unspecified Local Environment Variable Buffer Overflow Vulnerability
References:
References: