Traceroute Detection Security Tool Remote Format String Vulnerability

Bugtraq ID:	9119
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 27 2003 12:00AM
Updated:	Nov 27 2003 12:00AM
Credit:	This issue was discovered by SnoSoft.
Vulnerable:	Baldor detecttr.c
Not Vulnerable:

Traceroute Detection Security Tool Remote Format String Vulnerability

A remote format string vulnerability has been discovered in the detecttr.c traceroute detection tool, initially released in Phrack magazine.

The problem occurs due to erroneous usage of the syslog() function, potentially making it prone to format string attacks via malformed hostnames.

Successful exploitation of this issue could allow an attacker to execute arbitrary code on a vulnerable system with the privileges of the user invoking detecttr.

Traceroute Detection Security Tool Remote Format String Vulnerability

The researchers who discovered this issue have stated that proof of concept code has been made available, however it has not been made publicly available.

Traceroute Detection Security Tool Remote Format String Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Traceroute Detection Security Tool Remote Format String Vulnerability

References:

• Phrack Magazine Volume 7, Issue 51 September 01, 1997, article 03 of 17 (Phrack)
  
• SRT2003-TURKEY-DAY - *novelty* - detecttr.c Trace Route detection vulnerability (KF )