bugtraq - Immunity Advisory: dtlogin remote root

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 23 Mar 2004 15:40:49 -0500
From: Dave Aitel <dave@...unitysec.com>
To: bugtraq@...urityfocus.com
Subject: Immunity Advisory: dtlogin remote root

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Technical Summary: A double-free weakness in the XDMCP parser of
dtlogin (CDE) results in remote code execution against popular server
operating systems, such as Solaris. Linux is not vulnerable, to
Immunity's knowledge. This attack is performed over UDP port 177.

dtlogin is also the program that displays the login screen, so killing
it blindly is not recommended.

The full advisory in pdf form is available at:
http://www.immunitysec.com/downloads/dtlogin.sxw.pdf

This is one of the new vulnerabilities in the Shellcoder's Handbook.

Thanks,
Dave Aitel
Immunity, Inc.
http://www.immunitysec.com/CANVAS/ "Hacking like it is in the movies."
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAYKDRzOrqAtg8JS8RAtEZAKCo50ri06lIn65WI/nJL43Ki3HVpQCg26Tb
+M095Yr25NQ8SYyEHI7xJWU=
=g/I9
-----END PGP SIGNATURE-----