Buffer overflow in the PyCrypto ARC2 module 2.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large ARC2 key length.

Missing checks for the key length in the ARC2 module potentially allowed attackers to crash applications using python-crypto or potentially even cause execute arbitrary code (CVE-2009-0544).

A vulnerability have been discovered and corrected in PyCrypto ARC2 module 2.0.1, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large ARC2 key length (CVE-2009-0544).

The updated packages have been patched to prevent this.

Update :

The previous update package was not signed.

Mike Wiacek discovered that the ARC2 implementation in Python Crypto did not correctly check the key length. If a user or automated system were tricked into processing a malicious ARC2 stream, a remote attacker could execute arbitrary code or crash the application using Python Crypto, leading to a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200903-11 (PyCrypto: Execution of arbitrary code)

    Mike Wiacek of the Google Security Team reported a buffer overflow in     the ARC2 module when processing a large ARC2 key length.
  Impact :

    A remote attacker could entice a user or automated system to decrypt an     ARC2 stream in an application using PyCrypto, possibly resulting in the     execution of arbitrary code or a Denial of Service.
  Workaround :

    There is no known workaround at this time.

Mike Wiacek discovered that a buffer overflow in the ARC2 implementation of Python Crypto, a collection of cryptographic algorithms and protocols for Python allows denial of service and potentially the execution of arbitrary code.

ID	Name	Product	Family	Severity
40301	openSUSE Security Update : python-crypto (python-crypto-589)	Nessus	SuSE Local Security Checks	critical
40117	openSUSE Security Update : python-crypto (python-crypto-589)	Nessus	SuSE Local Security Checks	critical
38713	openSUSE 10 Security Update : python-crypto (python-crypto-6063)	Nessus	SuSE Local Security Checks	critical
38149	Mandriva Linux Security Advisory : python-pycrypto (MDVSA-2009:050-1)	Nessus	Mandriva Local Security Checks	critical
37927	Mandriva Linux Security Advisory : pycrypto (MDVSA-2009:049-1)	Nessus	Mandriva Local Security Checks	critical
37504	Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : python-crypto vulnerability (USN-729-1)	Nessus	Ubuntu Local Security Checks	critical
35809	GLSA-200903-11 : PyCrypto: Execution of arbitrary code	Nessus	Gentoo Local Security Checks	critical
35738	Debian DSA-1726-1 : python-crypto - buffer overflow	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2009-0544

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical