FreeBSD : sircd -- remote reverse DNS buffer overflow (1374b96c-a1c2-11db-9ddc-0011098b2f36)

High Nessus Plugin ID 24201


The remote FreeBSD host is missing a security-related update.


Secunia reports :

A vulnerability in sircd can be exploited by a malicious person to compromise a vulnerable system. The vulnerability is caused by a boundary error in the code handling reverse DNS lookups, when a user connects to the service. If the FQDN (Fully Qualified Domain Name) returned is excessively long, the allocated buffer is overflowed making it possible to execute arbitrary code on the system with the privileges of the sircd daemon.


Update the affected package.

See Also

Plugin Details

Severity: High

ID: 24201

File Name: freebsd_pkg_1374b96ca1c211db9ddc0011098b2f36.nasl

Version: $Revision: 1.19 $

Type: local

Published: 2007/01/17

Modified: 2013/06/21

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 8.3

Temporal Score: 7.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:C

Temporal Vector: CVSS2#E:F/RL:U/RC:ND

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:sircd, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2007/01/15

Vulnerability Publication Date: 2003/02/24

Reference Information

CVE: CVE-2003-1377

BID: 6924

Secunia: 8153

CWE: 119