CVE-2012-3368: Low severity redhat dtach vulnerability
A portion of memory (random stack data) disclosure flaw was found in the way dtach, a simple program emulating the detach feature of screen, performed client connection termination under certain circumstances. A remote attacker could use this flaw to potentially obtain sensitive information by issuing a specially-crafted dtach client connection close request.
Upstream ticket: [1] http://sourceforge.net/tracker/?func=detail&aid=3517812&groupid=36489&atid=417357
Preliminary proposed patch: [2] http://sourceforge.net/tracker/download.php?groupid=36489&atid=417357&fileid=441195&aid=3517812
References: [3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=625302 [4] https://bugzilla.redhat.com/showbug.cgi?id=812551
Other sources
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3368?
CVE-2012-3368 is classified as a medium severity vulnerability.
How do I fix CVE-2012-3368?
To fix CVE-2012-3368, upgrade dtach to version 0.8 or later.
What is the impact of CVE-2012-3368?
The impact of CVE-2012-3368 is that a remote attacker could potentially obtain sensitive information from memory.
Which versions of dtach are affected by CVE-2012-3368?
CVE-2012-3368 affects dtach version 0.8.
Can I still use dtach if I am vulnerable to CVE-2012-3368?
Using dtach while vulnerable to CVE-2012-3368 poses a security risk, and it is strongly recommended to apply the fix.