Red Hat Enterprise Linux mctrans daemon denial of service
| rhel-mctrans-dos (38357) |  Low Risk |
Description:
The Red Hat Enterprise Linux MCS translation daemon (mctransd) is vulnerable to a denial of service caused by improper validation of user-supplied input by the substitute_range() function. A local attacker could exploit this vulnerability to cause mctransd to temporarily stop responding to other requests.
Platforms Affected:
- RedHat, Enterprise Linux 5
- RedHat, Enterprise Linux 5 Client
- RedHat, mctrans 0.2.3
Remedy:
Apply the appropriate update for your system. See References.
Consequences:
Denial of Service
References:
- Red Hat Bugzilla Bug 288201, CVE-2007-4570 mctransd DoS at https://bugzilla.redhat.com/show_bug.cgi?id=288201.
- BID-26371: Mcstrans Mcstrans.C Local Denial of Service Vulnerability
- CVE-2007-4570: Algorithmic complexity vulnerability in the MCS translation daemon in mcstrans 0.2.3 allows local users to cause a denial of service (temporary daemon outage) via a large range of compartments in sensitivity labels.
- RHSA-2007-0542: Low: mcstrans security and bug fix update
Reported:
Nov 07, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net