CVE-1999-0405

Description

A buffer overflow in lsof allows local users to obtain root privilege.

Affected products

• debian / debian_linux2.0 – 2.0
• debian / debian_linux2.0.5 – 2.0.5
• FreeBSD / FreeBSD2.0 – 2.0
• FreeBSD / FreeBSD2.0.5 – 2.0.5
• FreeBSD / FreeBSD2.1.0 – 2.1.0
• FreeBSD / FreeBSD2.1.5 – 2.1.5
• FreeBSD / FreeBSD2.1.6 – 2.1.6
• FreeBSD / FreeBSD2.1.7.1 – 2.1.7.1
• FreeBSD / FreeBSD2.2.2 – 2.2.2
• FreeBSD / FreeBSD2.2.3 – 2.2.3
• FreeBSD / FreeBSD2.2.4 – 2.2.4
• FreeBSD / FreeBSD2.2.5 – 2.2.5
• FreeBSD / FreeBSD2.2.6 – 2.2.6
• FreeBSD / FreeBSD2.2.8 – 2.2.8
• FreeBSD / FreeBSD3.0 – 3.0
• FreeBSD / FreeBSD3.1 – 3.1
• FreeBSD / FreeBSD3.2 – 3.2
• RedHat / linux5.2 – 5.2
• SUSE / suse_linux4.2 – 4.2
• SUSE / suse_linux4.3 – 4.3
• SUSE / suse_linux4.4 – 4.4
• SUSE / suse_linux4.4.1 – 4.4.1
• SUSE / suse_linux5.0 – 5.0
• SUSE / suse_linux5.1 – 5.1
• SUSE / suse_linux5.2 – 5.2
• SUSE / suse_linux5.3 – 5.3
• SUSE / suse_linux6.0 – 6.0
• SUSE / suse_linux6.1 – 6.1

Exploits & proofs of concept

• exploit-dbDebian 2.0/2.0 r5 / FreeBSD 3.2 / OpenBSD 2.4 / RedHat 5.2 i386 / S.u.S.E 6.1 - 'Lsof' Local Buffer Overflow (2)by Zhodiac
• exploit-dbDebian 2.0/2.0 r5 / FreeBSD 3.2 / OpenBSD 2.4 / RedHat 5.2 i386 / S.u.S.E 6.1 - 'Lsof' Local Buffer Overflow (1)by c0nd0r

References

• MISChttp://www.osvdb.org/3163