[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <201404220114.s3M1E2I2029202@linus.mitre.org>
Date: Mon, 21 Apr 2014 21:14:02 -0400 (EDT)
From: cve-assign@...re.org
To: mattd@...fuzz.com
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE request / advisory: gdomap (GNUstep core package <= 1.24.6)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> gdomap (GNUstep Distributed Objects nameserver)
> After receiving a crafted invalid request, gdomap will attempt to log
> an error message to the system logger. However, due to incorrect setup
> of the logger during server initialization, the logger and gdomap
> itself will mess up program state enough that program execution will
> be aborted. gdomap listens to all interfaces, allowing a remote
> unauthenticated attacker to DOS the nameserver.
> https://savannah.gnu.org/bugs/?41751
> http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/Tools/gdomap.c?r1=37756&r2=37755&pathrev=37756
> http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/ChangeLog?r1=37756&r2=37755&pathrev=37756
> closes the fd that openlog() just made ... this closed fd's number is
> re-used for gdomap's UDP listening socket ... then closes what it
> thinks is still its fd (but is actually now the UDP listening socket
> mentioned above)
> Tools/gdomap.c: Don't open syslog connection until after we have
> forked and closed old descriptors .. fix for bug #41751
Use CVE-2014-2980.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJTVcIOAAoJEKllVAevmvmsBEkH/jdrTeZ3gB0ESGkNFChbtmXx
6BC5CzThnaeLhtDWx67GHE1TSpxyCJQLJtnocZwn9Z4E97UbLUR/EuD2bBlnsavE
/BsVUOxZ+TAxThvwTqTRGKi/LFsJBzlfe2zZuwsXC1BNCuUAvguwBmbrDGMTFbdB
+kzVDsdLOPlTAZVB7xFirokNQFu+i367plde3MvLPeMwIB80aWJyMNjwtwPW7x91
t3jgpZ7V+3Y4eJ09JHo08mxJYqdw03c10sWRkmWqLn51IH6u7BC/gh/s6wCBsZQu
wgFQ1Mnwes+pNCgGnc8HJgH8qGphPPvS8HyI+HoVw49A++rgU1USIe6ADck12Uo=
=siER
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
