Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr.

New mtr packages are available for Slackware 12.0, 12.1, and -current to fix a security issue.

This update fixes a stack-based buffer overflow which could potentially be exploited by a remote attacker to execute arbitrary code. (CVE-2008-2357)

This update fixes a stack based buffer overflow which could potentially be exploited by a remote attacker to execute arbitrary code (CVE-2008-2357).

The remote host is affected by the vulnerability described in GLSA-200806-01 (mtr: Stack-based buffer overflow)

    Adam Zabrocki reported a boundary error within the split_redraw()     function in the file split.c, possibly leading to a stack-based buffer     overflow.
  Impact :

    A remote attacker could use a specially crafted resolved hostname to     execute arbitrary code with root privileges. However, it is required     that the attacker controls the DNS server used by the victim, and that     the '-p' (or '--split') command line option is used.
  Workaround :

    There is no known workaround at this time.

Adam Zabrocki discovered that under certain circumstances mtr, a full screen ncurses and X11 traceroute tool, could be tricked into executing arbitrary code via overly long reverse DNS records.

ID	Name	Product	Family	Severity
33751	Slackware 12.0 / 12.1 / current : mtr (SSA:2008-210-06)	Nessus	Slackware Local Security Checks	medium
33387	SuSE 10 Security Update : mtr (ZYPP Patch Number 5291)	Nessus	SuSE Local Security Checks	medium
33386	openSUSE 10 Security Update : mtr (mtr-5289)	Nessus	SuSE Local Security Checks	medium
33084	GLSA-200806-01 : mtr: Stack-based buffer overflow	Nessus	Gentoo Local Security Checks	medium
32447	Debian DSA-1587-1 : mtr - buffer overflow	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2008-2357

critical

Tenable Plugins

medium

medium

medium

medium

medium