OSVDB ID: 11525

Title: samhain sh_hash_compdata() Function Local Overflow

Info

Disclosure

Nov 08, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A local overflow exists in samhain. The sh_hash_compdata() function fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request, a malicious user can cause arbitrary code execution resulting in a loss of integrity. No further details have been provided.

Classification

Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Upgrade to version 2.0.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Rainer Wichmann

samhain

2.0.1
2.0.0
1.8.12b
1.8.12a
1.8.11
1.8.10b
1.8.10a
1.8.10
1.8.9
1.8.12

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/36218