Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors involving a series of TCP connections that triggers use of many open file descriptors.

Updated bip package fixes security vulnerability :

Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors involving a series of TCP connections that triggers use of many open file descriptors (CVE-2012-0806).

Julien Tinnes reports,

Bip doesn't check if fd is equal or larger than FD_SETSIZE.

Add upstream patch to fix buffer overflow with too many open fd's

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201201-18 (bip: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in bip:
      Uli Schlachter reported that bip does not properly handle invalid         data during authentication, resulting in a daemon crash         (CVE-2010-3071).
      Julien Tinnes reported that bip does not check the number of open         file descriptors against FD_SETSIZE, resulting in a stack buffer         overflow (CVE-2012-0806).
  Impact :

    A remote attacker could exploit these vulnerabilities to execute       arbitrary code with the privileges of the user running the bip daemon, or       cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Julien Tinnes reported a buffer overflow in the Bip multiuser IRC proxy which may allow arbitrary code execution by remote users.

The oldstable distribution (lenny) is not affected by this problem.

ID	Name	Product	Family	Severity
66077	Mandriva Linux Security Advisory : bip (MDVSA-2013:063)	Nessus	Mandriva Local Security Checks	medium
57908	FreeBSD : bip -- buffer overflow (1c4cab30-5468-11e1-9fb7-003067b2972c)	Nessus	FreeBSD Local Security Checks	medium
57829	Fedora 16 : bip-0.8.8-2.fc16 (2012-0941)	Nessus	Fedora Local Security Checks	medium
57828	Fedora 15 : bip-0.8.8-2.fc15 (2012-0916)	Nessus	Fedora Local Security Checks	medium
57744	GLSA-201201-18 : bip: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
57693	Debian DSA-2393-1 : bip - buffer overflow	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2012-0806

critical

Tenable Plugins

medium

medium

medium

medium

medium

medium