oss-security - Re: Multiples vulnerabilities in wordnet

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Mon, 12 May 2008 16:14:19 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com
cc: wordnet@...nceton.edu
Subject: Re: Multiples vulnerabilities in wordnet

I've assigned CVE-2008-2149 to just deal with the "overflow in a long
command line" as reported for the searchwn function.  This is based on the
comment in the Gentoo bug report that "I have seen that Wordnet is
sometimes used as a backend in e.g. web applications," otherwise might
have dismissed it as just a regular command-line overflow.  (Increasing
application connectivity is making this distinction harder, though.)

If additional detailed research is performed, then other CVEs could be
assigned accordingly.

- Steve

======================================================
Name: CVE-2008-2149
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2149
Reference: CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=211491

Stack-based buffer overflow in the searchwn function in Wordnet 2.0,
2.1, and 3.0 might allow context-dependent attackers to execute
arbitrary code via a long command line option.  NOTE: this issue
probably does not cross privilege boundaries except in cases in which
Wordnet is used as a back end.

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.