REDHAT-BUG-957795: Medium severity berkeley open infrastructure for network computing (boinc) vulnerability
Format string flaw was found in the way boinc-client, a Berkeley Open Infrastructure for Network Computing (BOINC) client for distributed computing, performed account information write / dump into corresponding XML file. An attacker could provide an account file (file containing account information) with specially-crafted value of the 'guiurls' item that, when processed would lead to boinc-client executable crash or, potentially, arbitrary code execution with the privileges of the user running the boinc-client binary.
References: [1] http://www.openwall.com/lists/oss-security/2013/04/28/3
Relevant upstream patch: [2] http://boinc.berkeley.edu/gitweb/?p=boinc-v2.git;a=commitdiff;h=99258dcecba8ef36e1ce0fd6e0dacffe53613ac9
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-957795?
The severity of REDHAT-BUG-957795 is considered critical due to the potential exploitation of the format string flaw.
How do I fix REDHAT-BUG-957795?
To fix REDHAT-BUG-957795, update the BOINC client to the latest version that has addressed this vulnerability.
What type of vulnerability is REDHAT-BUG-957795?
REDHAT-BUG-957795 is a format string vulnerability that can lead to information disclosure or arbitrary code execution.
Who is affected by REDHAT-BUG-957795?
Users of the Berkeley Open Infrastructure for Network Computing (BOINC) client are affected by REDHAT-BUG-957795.
Is there a known exploit for REDHAT-BUG-957795?
Yes, there are potential exploits for REDHAT-BUG-957795 that could allow an attacker to manipulate account information.