REDHAT-BUG-761245: Buffer Overflow
There exists a integer overflow to buffer overflow vulnerability within tzfileread function of the GNU C Library. This vulnerability was published by dividead early in 2009 in the following blog post:
http://dividead.wordpress.com/2009/06/01/glibc-timezone-integer-overflow/
In December 3, Kingcope, at Full Disclosure Mailing List, noted vsftpd as one possible attack vector for this issue:
http://lists.grok.org.uk/pipermail/full-disclosure/2011-December/084452.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-761245?
The severity of REDHAT-BUG-761245 is considered high due to the potential for remote code execution resulting from the integer overflow to buffer overflow vulnerability.
How do I fix REDHAT-BUG-761245?
To fix REDHAT-BUG-761245, it is recommended to update the GNU C Library to the latest version that contains the necessary security patches.
What systems are affected by REDHAT-BUG-761245?
REDHAT-BUG-761245 affects systems running the GNU C Library and certain versions of vsftpd.
What is the nature of the vulnerability in REDHAT-BUG-761245?
REDHAT-BUG-761245 is an integer overflow vulnerability that can lead to a buffer overflow within the __tzfile_read function.
When was REDHAT-BUG-761245 published?
REDHAT-BUG-761245 was publicly disclosed by the researcher dividead in early 2009.