Vulnerability 34692 - CERT Civis.Net

Vulnerability Name:

CCN-34692

Published:

2007-06-02

Updated:

2007-06-02

Summary:

The GNU Project Debugger (GDB) is vulnerable to a buffer overflow, caused by improper bounds checking by the coffread.c file. By creating a specially-crafted UPX file, a remote attacker could overflow a buffer and execute arbitrary code on the system, once the file is opened.

CVSS v3 Severity:

5.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

5.1 Medium (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P)
4.1 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:U/RC:UR)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): High Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Consequences:

Gain Access

References:

Source: CCN
Type: Full-Disclosure Mailing List, Sat Jun 02 2007 - 12:48:03 CDT
SNMY200706_01 : GBD UPX File Handling Buffer Overflow Vulnerability

Source: CCN
Type: GNU Project Debugger Web site
GDB: The GNU Project Debugger

Source: CCN
Type: BID-24291
GDB Process_Coff_Symbol UPX File Buffer Overflow Vulnerability

Source: XF
Type: UNKNOWN
gdb-upx-bo(34692)

Vulnerable Configuration:

Configuration CCN 1:

cpe:/a:gnu:gdb:6.6:*:*:*:*:*:*:*

OR cpe:/a:gnu:gdb:6.5:*:*:*:*:*:*:*

Denotes that component is vulnerable

BACK