FreeBSD fts library buffer overflow allows root privileges
| freebsd-fts-lib-bo (3304) |  High Risk |
Description:
FreeBSD is vulnerable to a buffer overflow in the fts library function. Programs that traverse the file system of the host use the fts library routines function. A local attacker can overflow the fts library function, which could lead to a core dump when running scripts that traverse trees (any tree that is controlled by the user). This vulnerability allows an attacker to gain root privileges.
Platforms Affected:
- FreeBSD, FreeBSD 1.1.5.1
- FreeBSD, FreeBSD 2.0
- FreeBSD, FreeBSD 2.0.5
- FreeBSD, FreeBSD 2.1.0
- FreeBSD, FreeBSD 2.1.5
- FreeBSD, FreeBSD 2.1.7.1
- FreeBSD, FreeBSD 2.2
- FreeBSD, FreeBSD 2.2.1
- FreeBSD, FreeBSD 2.2.2
- FreeBSD, FreeBSD 2.2.3
- FreeBSD, FreeBSD 2.2.4
- FreeBSD, FreeBSD 2.2.5
- FreeBSD, FreeBSD 2.2.6
- FreeBSD, FreeBSD 2.2.7
- FreeBSD, FreeBSD 2.2.8
- FreeBSD, FreeBSD 3.0
- FreeBSD, FreeBSD 3.1
- FreeBSD, FreeBSD 3.2
Remedy:
For FreeBSD 3.2 and earlier:
Upgrade to the latest version of FreeBSD (3.3 RELEASE or later), as listed in FreeBSD Security Advisory FreeBSD-SA-99:05. See References.
Consequences:
Gain Privileges
References:
- FreeBSD Security Advisory FreeBSD-SA-99:04, Coredumps and symbolic links at ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-99:04.core.asc.
- FreeBSD Security Advisory FreeBSD-SA-99:05, fts library routine vulnerability at ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-99:05.fts.asc.
- BID-644: FreeBSD fts Library Buffer Overflow Vulnerability
- CVE-1999-0761: Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.
- OSVDB ID: 1074: FreeBSD fts Library Routine Local Overflow
Reported:
Sep 15, 1999
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net