A vulnerability classified as critical was found in Red Hat KON 0.3.9. Affected by this vulnerability is an unknown part of the component fld. The manipulation of the argument CHARSET_REGISTRY/CHARSET_ENCODING with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.

The weakness was disclosed 06/21/2000 by Chris Evans (Website). The advisory is shared at securityfocus.com. This vulnerability is known as CVE-2000-0607. The exploitation appears to be easy. An attack has to be approached locally. The exploitation doesn't need any form of authentication. Technical details and also a public exploit are known.

It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept. We expect the 0-day to have been worth approximately $5k-$25k.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the databases at Exploit-DB (20024) and SecurityFocus (BID 1371†). The entry VDB-15696 is pretty similar.

Productinfo

Vendor

• Red Hat

Name

• KON

Version

• 0.3.9

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion