Date: Mon, 21 Apr 2014 21:14:02 -0400 (EDT) From: cve-assign@...re.org To: mattd@...fuzz.com Cc: cve-assign@...re.org, oss-security@...ts.openwall.com Subject: Re: CVE request / advisory: gdomap (GNUstep core package <= 1.24.6) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > gdomap (GNUstep Distributed Objects nameserver) > After receiving a crafted invalid request, gdomap will attempt to log > an error message to the system logger. However, due to incorrect setup > of the logger during server initialization, the logger and gdomap > itself will mess up program state enough that program execution will > be aborted. gdomap listens to all interfaces, allowing a remote > unauthenticated attacker to DOS the nameserver. > https://savannah.gnu.org/bugs/?41751 > http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/Tools/gdomap.c?r1=37756&r2=37755&pathrev=37756 > http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/ChangeLog?r1=37756&r2=37755&pathrev=37756 > closes the fd that openlog() just made ... this closed fd's number is > re-used for gdomap's UDP listening socket ... then closes what it > thinks is still its fd (but is actually now the UDP listening socket > mentioned above) > Tools/gdomap.c: Don't open syslog connection until after we have > forked and closed old descriptors .. fix for bug #41751 Use CVE-2014-2980. - -- CVE assignment team, MITRE CVE Numbering Authority M/S M300 202 Burlington Road, Bedford, MA 01730 USA [ PGP key available through http://cve.mitre.org/cve/request_id.html ] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (SunOS) iQEcBAEBAgAGBQJTVcIOAAoJEKllVAevmvmsBEkH/jdrTeZ3gB0ESGkNFChbtmXx 6BC5CzThnaeLhtDWx67GHE1TSpxyCJQLJtnocZwn9Z4E97UbLUR/EuD2bBlnsavE /BsVUOxZ+TAxThvwTqTRGKi/LFsJBzlfe2zZuwsXC1BNCuUAvguwBmbrDGMTFbdB +kzVDsdLOPlTAZVB7xFirokNQFu+i367plde3MvLPeMwIB80aWJyMNjwtwPW7x91 t3jgpZ7V+3Y4eJ09JHo08mxJYqdw03c10sWRkmWqLn51IH6u7BC/gh/s6wCBsZQu wgFQ1Mnwes+pNCgGnc8HJgH8qGphPPvS8HyI+HoVw49A++rgU1USIe6ADck12Uo= =siER -----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ