Jacques Gelinas linuxconf up to 1.28r3 LINUXCONF_LANG memory corruption

Summaryinfo

A vulnerability, which was classified as problematic, was found in Jacques Gelinas linuxconf. This issue affects some unknown processing. Such manipulation of the argument LINUXCONF_LANG as part of Environment Variable leads to memory corruption. This vulnerability is listed as CVE-2002-1506. In addition, an exploit is available. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Jacques Gelinas linuxconf. Affected by this issue is some unknown functionality. The manipulation of the argument LINUXCONF_LANG as part of a Environment Variable leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated.

The weakness was presented 04/02/2003 by Euan Briggs (Website). The advisory is shared for download at archives.neohapsis.com. This vulnerability is handled as CVE-2002-1506. The exploitation is known to be easy. The attack needs to be approached locally. No form of authentication is required for exploitation. Technical details as well as a public exploit are known.

The exploit is available at securityfocus.com. It is declared as proof-of-concept.

Upgrading to version 1.28r4 eliminates this vulnerability.

The vulnerability is also documented in the databases at X-Force (9980), Exploit-DB (21761) and SecurityFocus (BID 5585†). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Jacques Gelinas

Name

• linuxconf

Version

• 1.1.6r10
• 1.1.7
• 1.1.8
• 1.1.9r1
• 1.1.9r2
• 1.2
• 1.2.1
• 1.2.1r1
• 1.2.1r2
• 1.2.1r3
• 1.2.1r4
• 1.2.1r5
• 1.2.1r6
• 1.2.1r7
• 1.2.1r8
• 1.2.2
• 1.2.3
• 1.2.3r1
• 1.2.3r2
• 1.2.4
• 1.2.4r2
• 1.2.4r4
• 1.2.4r5
• 1.2r1
• 1.2r2
• 1.27
• 1.27r3
• 1.27r4
• 1.27r5
• 1.28
• 1.28r1
• 1.28r2
• 1.28r3

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion