|
|
>> Osiris Logging Functionality Remote Format String and Code Execution Vulnerabilities
|
Title : Osiris Logging Functionality Remote Format String and Code Execution Vulnerabilities
VUPEN ID : VUPEN/ADV-2006-3072
CVE ID : GENERIC-MAP-NOMATCH
Rated as : High Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2006-07-31
|
Multiple vulnerabilities have been identified in Osiris, which could be exploited by remote attackers to execute arbitrary commands. These flaws are due to format string errors in the logging functionality [logging.c] when handling specially crafted arguments, which could be exploited by remote atackers to crash an affected application or compromise a vulnerable system.
Affected Products
Osiris version 4.2.0 and prior
Solution
Upgrade to Osiris version 4.2.1 :
http://osiris.shmoo.com/download.html
References
http://www.vupen.com/english/advisories/2006/3072
Credits
Vulnerabilities reported by Ulf Harnhammar and Max Vozeler
ChangeLog
2006-07-31 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
