monopd Remote Overflow

2002-12-24T00:00:00
ID OSVDB:2937
Type osvdb
Reporter OSVDB
Modified 2002-12-24T00:00:00

Description

Vulnerability Description

UNIXcode.org's monopd has a flaw which may allow a remote attacker to execute arbitrary code. The issue is due to the use of vsprintf which allows for a buffer overflow in the messaging framework.

Solution Description

Upgrade to version 0.6.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Short Description

UNIXcode.org's monopd has a flaw which may allow a remote attacker to execute arbitrary code. The issue is due to the use of vsprintf which allows for a buffer overflow in the messaging framework.

References:

Generic Informational URL: http://www.unixcode.org/monopd/