bug-gnats
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

possible format string bug in gnats 4.00 package


From: Khan Shirani
Subject: possible format string bug in gnats 4.00 package
Date: Thu, 24 Jun 2004 21:25:05 0000

dear gnats team, 
a possible vulnerability has been discovered within the gnats package , i have 
attached the relevant advisory. 
Please respond asap. 
Regards,
Khan Shirani
Zone-H Staff
-----------------------------------------------------------------------------------------------------------------------------------

=================================================================================================
Zone-h Security Advisory                                        Date of 
discovery : 21 june 2004
http://www.zone-h.org                                           Date of release 
  : 24 june 2004

Bug found by shirani [at] zone-h [dot] org , <address@hidden>
=================================================================================================

---------------------------------------
Software        : GNU Gnats 4.00
Bugs        : formats string bug(s)
Risk        : low/medium
Platform        : *nix
---------------------------------------

Description:
============

GNU GNATS is a set of tools for tracking bugs reported by users to a central 
site. 
It allows problem report management and communication with users via various 
means. 
GNATS stores all the information about problem reports 
in its databases and provides tools for querying, editing, and maintenance of 
the databases. 
http://www.gnu.org/software/gnats/


Vulnerability:
==============

A format string bug has been discovered in the Gnats package which 
could *possibly* be exploited to execute arbitrary commands.

vulnerable code:
================
----------------------
gnats-4.0\gnats\misc.c

#ifdef HAVE_SYSLOG_H
        case SYSLOG:
          syslog (severity, buf);
          break;
#endif
----------------------

Vendor Notice:
==============

The Gnats team has been notified of the discoveries via  <address@hidden>
No patch is available at this time


Copyright
=========

Contents may not be altered without notification to orignial author
permission is granted to reproduce this advisory on public databases.


address@hidden
and all the zone-h team, http://www.zone-h.org





reply via email to

[Prev in Thread] Current Thread [Next in Thread]