Gentoo Linux Advisory: xfree86Feb 12, 2004, 14:45 (0 Talkback[s])
Gentoo Linux Security Advisory GLSA 200402-02
Exploitation of a buffer overflow in the XFree86 Project Inc.'s XFree86 X Window System allows local attackers to gain root privileges.
XFree86 provides a client/server interface between display hardware and the desktop environment while also providing both the windowing infrastructure and a standardized API. XFree86 is platform independent, network-transparent and extensible.
Exploitation of a buffer overflow in the XFree86 Window System discovered by iDefence [ 1 ] allows local attackers to gain root privileges.
The problem exists in the parsing of the 'font.alias' file. The X server (running as root) fails to check the length of the user provided input, so a malicious user may craft a malformed 'font.alias' file causing a buffer overflow upon parsing, eventually leading to the execution of arbitrary code.
To reproduce the overflow on the command line, you can run:
# cat > fonts.dir <<EOF
Successful exploitation can lead to a root compromise provided that the attacker is able to execute commands in the X11 subsystem. This can be done either by having console access to the target or through a remote exploit against any X client program such as a web-browser, mail-reader or game.
No immediate workaround is available; a software upgrade is required.
Gentoo has released XFree 4.2.1-r3, 4.3.0-r4 and 188.8.131.522-r1 and encourages all users to upgrade their XFree86 installations. Vulnerable versions are no longer available in Portage.
All users are recommended to upgrade their XFree86 installation:
# emerge sync # emerge -pv x11-base/xfree # emerge x11-base/xfree
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to firstname.lastname@example.org or alternatively, you may file a bug at http://bugs.gentoo.org.
0 Talkback[s] (click to add your comment)