Linux IPRoute Spoofed Kernel Messages Denial Of Service Vulnerability
BID:9092
Info
Linux IPRoute Spoofed Kernel Messages Denial Of Service Vulnerability
| Bugtraq ID: | 9092 |
| Class: | Input Validation Error |
| CVE: |
CVE-2003-0856 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 24 2003 12:00AM |
| Updated: | Jul 12 2009 12:56AM |
| Credit: | Discovery credited to Herbert Xu. |
| Vulnerable: |
SuSE SUSE Linux Enterprise Server 8 SuSE Linux Enterprise Server 9 SuSE Linux Desktop 1.0 SuSE Linux 8.1 SuSE Linux 8.0 i386 SuSE Linux 8.0 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux Database Server 0 Redhat Linux 9.0 i386 Redhat Linux 8.0 i386 Redhat Linux 7.3 i386 Redhat Linux 7.2 ia64 Redhat Linux 7.2 i386 Redhat Linux 7.1 pseries Redhat Linux 7.1 iseries Redhat Linux 7.1 i386 Mandriva Linux Mandrake 10.0 AMD64 Mandriva Linux Mandrake 10.0 Mandriva Linux Mandrake 9.2 amd64 Mandriva Linux Mandrake 9.2 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Corporate Server 2.1 David Mischler IPRoute 2.4.7 David Mischler IPRoute 2.2.4 David Mischler IPRoute 20010824 |
| Not Vulnerable: | |
Discussion
Linux IPRoute Spoofed Kernel Messages Denial Of Service Vulnerability
A problem has been discovered in iproute when handling messages from the kernel. Because of this, it may be possible for an attacker to deny service to legitimate users of a system.
A problem has been discovered in iproute when handling messages from the kernel. Because of this, it may be possible for an attacker to deny service to legitimate users of a system.
Exploit / POC
Solution / Fix
Linux IPRoute Spoofed Kernel Messages Denial Of Service Vulnerability
Solution:
Red Hat has released an advisory to address this issue. See referenced advisory for additional details.
Gentoo has released updates that may be applied with the following commands:
# emerge sync
# emerge -pv ">=sys-apps/iproute-20010824-r5";
# emerge ">=sys-apps/iproute-20010824-r5";
Debian has released advisory DSA 492-1 to address this issue. Please see the attached avdisory for details on obtaining and applying fixes.
RedHat has released advisory FEDORA-2004-115 to address this issue in Fedora. Please see the referenced avdisory for details on obtaining and applying fixes.
RedHat has released advisory FEDORA-2004-154 to address this issue in Fedora Core 2. Please see the referenced avdisory for details on obtaining and applying fixes. The fixes contain new packages for the netplug daemon.
Mandrake Linux has released advisory MDKSA-2004:148 along with fixes to address this issue. Please see the referenced advisory for further information.
SuSE Linux has released a summary report (SUSE-SR:2005:001) advising that this as well as other issues have been resolved. Please see the referenced advisory for more information.
David Mischler IPRoute 20010824
David Mischler IPRoute 2.2.4
David Mischler IPRoute 2.4.7
Solution:
Red Hat has released an advisory to address this issue. See referenced advisory for additional details.
Gentoo has released updates that may be applied with the following commands:
# emerge sync
# emerge -pv ">=sys-apps/iproute-20010824-r5";
# emerge ">=sys-apps/iproute-20010824-r5";
Debian has released advisory DSA 492-1 to address this issue. Please see the attached avdisory for details on obtaining and applying fixes.
RedHat has released advisory FEDORA-2004-115 to address this issue in Fedora. Please see the referenced avdisory for details on obtaining and applying fixes.
RedHat has released advisory FEDORA-2004-154 to address this issue in Fedora Core 2. Please see the referenced avdisory for details on obtaining and applying fixes. The fixes contain new packages for the netplug daemon.
Mandrake Linux has released advisory MDKSA-2004:148 along with fixes to address this issue. Please see the referenced advisory for further information.
SuSE Linux has released a summary report (SUSE-SR:2005:001) advising that this as well as other issues have been resolved. Please see the referenced advisory for more information.
David Mischler IPRoute 20010824
-
Debian iproute_20010824-8woody1_alpha.deb
Debian GNU/Linux 3.0 (Woody)
http://security.debian.org/pool/updates/main/i/iproute/iproute_2001082 4-8woody1_alpha.deb -
Debian iproute_20010824-8woody1_arm.deb
Debian GNU/Linux 3.0 (Woody)
http://security.debian.org/pool/updates/main/i/iproute/iproute_2001082 4-8woody1_arm.deb -
Debian iproute_20010824-8woody1_hppa.deb
Debian GNU/Linux 3.0 (Woody)
http://security.debian.org/pool/updates/main/i/iproute/iproute_2001082 4-8woody1_hppa.deb -
Debian iproute_20010824-8woody1_i386.deb
Debian GNU/Linux 3.0 (Woody)
http://security.debian.org/pool/updates/main/i/iproute/iproute_2001082 4-8woody1_i386.deb -
Debian iproute_20010824-8woody1_ia64.deb
Debian GNU/Linux 3.0 (Woody)
http://security.debian.org/pool/updates/main/i/iproute/iproute_2001082 4-8woody1_ia64.deb -
Debian iproute_20010824-8woody1_m68k.deb
Debian GNU/Linux 3.0 (Woody)
http://security.debian.org/pool/updates/main/i/iproute/iproute_2001082 4-8woody1_m68k.deb -
Debian iproute_20010824-8woody1_mips.deb
Debian GNU/Linux 3.0 (Woody)
http://security.debian.org/pool/updates/main/i/iproute/iproute_2001082 4-8woody1_mips.deb -
Debian iproute_20010824-8woody1_mipsel.deb
Debian GNU/Linux 3.0 (Woody)
http://security.debian.org/pool/updates/main/i/iproute/iproute_2001082 4-8woody1_mipsel.deb -
Debian iproute_20010824-8woody1_powerpc.deb
Debian GNU/Linux 3.0 (Woody)
http://security.debian.org/pool/updates/main/i/iproute/iproute_2001082 4-8woody1_powerpc.deb -
Debian iproute_20010824-8woody1_s390.deb
Debian GNU/Linux 3.0 (Woody)
http://security.debian.org/pool/updates/main/i/iproute/iproute_2001082 4-8woody1_s390.deb -
Debian iproute_20010824-8woody1_sparc.deb
Debian GNU/Linux 3.0 (Woody)
http://security.debian.org/pool/updates/main/i/iproute/iproute_2001082 4-8woody1_sparc.deb
David Mischler IPRoute 2.2.4
-
Mandrake postgresql-test-7.4.1-2.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php
David Mischler IPRoute 2.4.7
-
Mandrake iproute2-2.4.7-11.1.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake iproute2-2.4.7-11.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake iproute2-2.4.7-11.1.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake iproute2-2.4.7-11.1.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake iproute2-2.4.7-4.2.C21mdk.i586.rpm
Mandrake Corporate Server 2.1
http://www.mandrakesecure.net/en/ftp.php -
Mandrake iproute2-2.4.7-4.2.C21mdk.x86_64.rpm
Mandrake Corporate Server 2.1/x86_64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake postgresql-test-7.4.1-2.2.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php -
SuSE iproute2-2.4.7-866.8.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/iproute2-2.4.7-86 6.8.i586.rpm -
SuSE iproute2-2.4.7-866.8.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/iproute2-2.4. 7-866.8.x86_64.rpm -
SuSE iproute2-2.4.7-870.2.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/iproute2-2.4.7-87 0.2.i586.rpm -
SuSE iproute2-2.4.7-870.2.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/iproute2-2.4. 7-870.2.x86_64.rpm -
SuSE iproute2-2.4.7-873.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/iproute2-2.4.7-87 3.i586.rpm -
SuSE iproute2-2.4.7-873.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/iproute2-2.4.7-87 3.i586.rpm -
SuSE iproute2-2.4.7-873.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/iproute2-2.4.7-87 3.i586.rpm -
SuSE iproute2-2.4.7-873.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/iproute2-2.4. 7-873.x86_64.rpm
References
Linux IPRoute Spoofed Kernel Messages Denial Of Service Vulnerability
References:
References: