CVE-2000-0607

Description

Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.

Affected products

• debian / debian_linux2.0 – 2.0
• debian / debian_linux2.1 – 2.1
• debian / debian_linux2.2 – 2.2
• debian / debian_linux2.3 – 2.3
• mandrakesoft / mandrake_linux6.1 – 6.1
• mandrakesoft / mandrake_linux7.0 – 7.0
• mandrakesoft / mandrake_linux7.1 – 7.1
• RedHat / linux5.0 – 5.0
• RedHat / linux5.1 – 5.1
• RedHat / linux5.2 – 5.2
• RedHat / linux6.1 – 6.1
• RedHat / linux6.2 – 6.2

Exploits & proofs of concept

• exploit-dbMandrake 7.0/7.1 / RedHat Kon2 0.3.9 - '/usr/bin/fld' Input File Overflowby E-Ligth

References

• MISChttp://www.securityfocus.com/bid/1371
• MISChttp://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006192340340.19998-100000%40ferret.lmh.ox.ac.uk