{"id":60880,"date":"2025-01-28T16:49:49","date_gmt":"2025-01-28T13:49:49","guid":{"rendered":"http:\/\/JVNVU#92217718"},"modified":"2025-01-28T16:49:49","modified_gmt":"2025-01-28T13:49:49","slug":"linux-ratfor-vulnerable-to-stack-based-buffer-overflow","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/linux-ratfor-vulnerable-to-stack-based-buffer-overflow\/","title":{"rendered":"Linux Ratfor vulnerable to stack-based buffer overflow"},"content":{"rendered":"
\n

Overview<\/h2>\n

Linux Ratfor provided by the Dimensional Gate contains a stack-based buffer overflow vulnerability.<\/p>\n<\/p><\/div>\n

\n

Description<\/h2>\n

Linux Ratfor provided by the Dimensional Gate contains a stack-based buffer overflow vulnerability (CWE-121<\/a>).<\/p>\n<\/p><\/div>\n

\n

Impact<\/h2>\n

When the software processes a special crafted file by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.<\/p>\n<\/p><\/div>\n

\n

Solution<\/h2>\n

Update the software<\/strong>
Update the software to the latest version according to the information provided by the developer.
The developer has released the following versions that address the vulnerability.\n<\/p>\n

    \n
  • Linux Ratfor 1.07<\/li>\n<\/ul><\/div>\n
    \n

    Vulnerability Analysis by JPCERT\/CC<\/h2>\n
    \n
    CVSS v3<\/span> CVSS:3.0\/AV:L\/AC:H\/PR:N\/UI:R\/S:U\/C:H\/I:H\/A:H<\/span> <\/p>\n
    \n

    Base Score:<\/span> 7.0<\/span> <\/p>\n

    <\/span> <\/div>\n<\/p><\/div>\n\n\n\n\n\n\n\n\n\n
    Attack Vector(AV)<\/th>\n Physical (P) <\/td>\n Local (L) <\/td>\n Adjacent (A) <\/td>\n Network (N) <\/td>\n<\/tr>\n
    Attack Complexity(AC)<\/th>\n High (H) <\/td>\n Low (L) <\/td>\n<\/tr>\n
    Privileges Required(PR)<\/th>\n High (H) <\/td>\n Low (L) <\/td>\n None (N) <\/td>\n<\/tr>\n
    User Interaction(UI)<\/th>\n Required (R) <\/td>\n None (N) <\/td>\n<\/tr>\n
    Scope(S)<\/th>\n Unchanged (U) <\/td>\n Changed (C) <\/td>\n<\/tr>\n
    Confidentiality Impact(C)<\/th>\n None (N) <\/td>\n Low (L) <\/td>\n High (H) <\/td>\n<\/tr>\n
    Integrity Impact(I)<\/th>\n None (N) <\/td>\n Low (L) <\/td>\n High (H) <\/td>\n<\/tr>\n
    Availability Impact(A)<\/th>\n None (N) <\/td>\n Low (L) <\/td>\n High (H) <\/td>\n<\/tr>\n<\/table><\/div>\n

    Comment<\/h2>\n

    This assumes an attack scenario in which a victim user is directed to process a crafted ratfor source code with the affected product.<\/p>\n<\/p><\/div>\n

    \n

    Credit<\/h2>\n

    Yuhei Kawakoya of NTT Social Informatics Laboratories \/ NTT Security Holdings Corporation reported this vulnerability to JPCERT\/CC.
    JPCERT\/CC coordinated with the developer.<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

    Overview Linux Ratfor provided by the Dimensional Gate contains a stack-based buffer overflow vulnerability. Description Linux Ratfor provided by the Dimensional Gate contains a stack-based buffer overflow vulnerability (CWE-121). Impact When the software processes a special crafted file by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-60880","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/60880","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=60880"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/60880\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=60880"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=60880"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=60880"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}