Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service (crash) via a request to the gmetad service with a long pathname.

A stack-based buffer overflow in ganglia's buffer process_path function has been fixed. CVE-2009-0241 has been assigned to this issue.

The remote host is affected by the vulnerability described in GLSA-200903-22 (Ganglia: Execution of arbitrary code)

    Spike Spiegel reported a stack-based buffer overflow in the     process_path() function when processing overly long pathnames in     gmetad/server.c.
  Impact :

    A remote attacker could send a specially crafted request to the gmetad     service leading to the execution of arbitrary code or a Denial of     Service.
  Workaround :

    There is no known workaround at this time.

Secunia reports :

Spike Spiegel has discovered a vulnerability in Ganglia which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary error within the process_path function in gmetad/server.c. This can be exploited to cause a stack-based buffer overflow by e.g. sending a specially crafted message to the gmetad service.

The vulnerability is confirmed in version 3.1.1. Other versions may also be affected.

Spike Spiegel discovered a stack-based buffer overflow in gmetad, the meta-daemon for the ganglia cluster monitoring toolkit, which could be triggered via a request with long path names and might enable arbitrary code execution.

The remote host is running the Ganglia Web Backend (gmetad). This version of Ganglia is vulnerable to a remote buffer overflow within the process_path() function.  An attacker exploiting this flaw would need the ability to send malformed data to the Ganglia gmetad process.  Successful exploitation would result in the attacker gaining control of the remote system.

ID	Name	Product	Family	Severity
40218	openSUSE Security Update : ganglia-monitor-core (ganglia-monitor-core-894)	Nessus	SuSE Local Security Checks	high
39966	openSUSE Security Update : ganglia-monitor-core (ganglia-monitor-core-894)	Nessus	SuSE Local Security Checks	high
38857	openSUSE 10 Security Update : ganglia-monitor-core (ganglia-monitor-core-6259)	Nessus	SuSE Local Security Checks	high
35903	GLSA-200903-22 : Ganglia: Execution of arbitrary code	Nessus	Gentoo Local Security Checks	high
35564	FreeBSD : ganglia -- buffer overflow vulnerability (b9077cc4-6d04-4bcb-a37a-9ceaebfdcc9e)	Nessus	FreeBSD Local Security Checks	high
35461	Debian DSA-1710-1 : ganglia-monitor-core - buffer overflow	Nessus	Debian Local Security Checks	high
4816	Ganglia Web Backend < 3.0.7 process_path Function Overflow	Nessus Network Monitor	CGI	high

Detections

Analytics

CVE-2009-0241

high

Tenable Plugins

high

high

high

high

high

high

high