From: Secunia Security Advisories (sec-advsecunia.com)
Date: Fri Jul 18 2003 - 14:56:03 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
xfstt Buffer Overflow Vulnerability

READ ONLINE:
http://www.secunia.com/advisories/9271/

CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
From local network

DESCRIPTION:
A vulnerability has been reported in xfstt, which can be exploited by
maliicous people to cause a DoS (Denial of Service).

The vulnerability is caused due to a boundary error in the
"working()" function, because data received via the network isn't
checked before being placed in a buffer. This can be exploited to
cause a buffer overflow by sending a specially crafted packet.

Successful exploitation results in the service crashing. Reportedly,
it is currently unclear if the vulnerability also can be exploited to
execute arbitrary code on a system.

The vulnerability has been reported in version 1.4. However, other
versions may also be affected.

SOLUTION:
Restrict access to the font server allowing only trusted people to
connect.

REPORTED BY / CREDITS:
Ruben Unteregger and Jonathan Heusser.

----------------------------------------------------------------------

Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]