Botan Es_Unix Privilege Escalation Vulnerability

Bugtraq ID:	9242
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 12 2003 12:00AM
Updated:	Dec 12 2003 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	Botan Botan 1.3.6 Botan Botan 1.3.5 Botan Botan 1.3.4 Botan Botan 1.3.3 Botan Botan 1.3.2 Botan Botan 1.3.1 Botan Botan 1.3
Not Vulnerable:	Botan Botan 1.3.7

Botan Es_Unix Privilege Escalation Vulnerability

Botan is prone to a privilege escalation vulnerability in the es_unix module on Unix systems that do not support /dev/random. The source of this issue is that external programs may be called without fully qualifying the path to the file. In some situations, this could be leveraged to elevate privileges.

This issue was reported by the vendor to exist in the 1.3.x development series of the software.

Botan Es_Unix Privilege Escalation Vulnerability

There is no exploit required.

Botan Es_Unix Privilege Escalation Vulnerability

Solution:
This issue was addressed in Botan 1.3.7. Users are advised to upgrade.


Botan Botan 1.3

• Botan Botan 1.3.7
  http://botan.randombit.net/download.php

Botan Botan 1.3.1

• Botan Botan 1.3.7
  http://botan.randombit.net/download.php

Botan Botan 1.3.2

• Botan Botan 1.3.7
  http://botan.randombit.net/download.php

Botan Botan 1.3.3

• Botan Botan 1.3.7
  http://botan.randombit.net/download.php

Botan Botan 1.3.4

• Botan Botan 1.3.7
  http://botan.randombit.net/download.php

Botan Botan 1.3.5

• Botan Botan 1.3.7
  http://botan.randombit.net/download.php

Botan Botan 1.3.6

• Botan Botan 1.3.7
  http://botan.randombit.net/download.php

Botan Es_Unix Privilege Escalation Vulnerability

References:

• Botan 1.3.x Changelog (Botan)
  
• Botan Homepage (Botan)