Two buffer overflow vulnerabilities in TPTEST may allow remote attackers to execute arbitrary code or cause Denial of Service.

Announced

2013-10-26

Revised

2013-10-26

Access

remote

Bugs

#261191

Advisory

https://security.gentoo.org/glsa/201310-16

Affected packages

Package	Arch	Vulnerable	Unaffected
net-analyzer/tptest	*	< 3.1.7-r2	>= 3.1.7-r2

Background

TPTEST is a tool to measure the speed of a user’s Internet connection.

Description

The GetStatsFromLine() function in TPTEST is vulnerable to buffer overflows from STATS lines with long email and pwd fields.

Impact

A remote attacker could send a specially-crafted STATS line, possibly resulting in arbitrary code execution or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All TPTEST users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-analyzer/tptest-3.1.7-r2"

References

• CVE-2009-0650
• CVE-2009-0659