ID
VAR-200311-0100
TITLE
Route Detection Security Tool Remote Format String Processing Vulnerability
Trust: 0.6
DESCRIPTION
Detecttr.c is a route detection program. Detecttr.c Due to a lack of adequate checking of hostnames, remote attackers can exploit this vulnerability for format string attacks, which may result in arbitrary instructions being executed on the system with process privileges. The problem is that because the detecttr.c error uses the syslog() function, the hostname is passed directly to the syslog() function without proper format string checking. When logging to the log file, it can cause corrupted memory information, and the commit data may be carefully constructed. Execute arbitrary instructions on the system with process privileges. A remote format string vulnerability has been discovered in the detecttr.c traceroute detection tool, initially released in Phrack magazine. Successful exploitation of this issue could allow an attacker to execute arbitrary code on a vulnerable system with the privileges of the user invoking detecttr
Trust: 0.81
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | baldor | model: | detecttr.c | scope: | - | version: | - | Trust: 0.9 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
THREAT TYPE
network
Trust: 0.3
TYPE
Input Validation Error
Trust: 0.3
EXTERNAL IDS
| db: | BID | id: | 9119 | Trust: 0.9 |
| db: | CNVD | id: | CNVD-2003-3494 | Trust: 0.6 |
REFERENCES
| url: | http://www.securityfocus.com/bid/9119/info | Trust: 0.6 |
| url: | http://www.phrack.org/show.php?p=51&a=3 | Trust: 0.3 |
| url: | /archive/1/345842 | Trust: 0.3 |
CREDITS
This issue was discovered by SnoSoft.
Trust: 0.3
SOURCES
| db: | CNVD | id: | CNVD-2003-3494 |
| db: | BID | id: | 9119 |
LAST UPDATE DATE
2022-05-17T02:08:44.708000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2003-3494 | date: | 2003-11-27T00:00:00 |
| db: | BID | id: | 9119 | date: | 2003-11-27T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2003-3494 | date: | 2003-11-27T00:00:00 |
| db: | BID | id: | 9119 | date: | 2003-11-27T00:00:00 |