|
Brought to you by:
Suppliers of:
|
|
|
| |
VMPS (VLAN Management Policy Server) is "a way of assigning switch ports to specific VLANs based on MAC address of connecting device. OpenVMPS is a GPL implementation of VMPS".
A format string vulnerability in VMPS allows remote attackers to cause the program to execute arbitrary. |
| |
Credit:
The information has been provided by mazahaquer.
|
| |
Vulnerable Systems:
* VMPS version 1.3
The format string vulnerability can be found in /vmpsd-1.3/log.c file:
void vmps_log(const int level, const char *fmt, ...)
{
char str[256];
va_list ap;
if ( ((log_level & 0xFF00) >= (level & 0xFF00)) &&
((level & log_level & 0x00FF) > 0) ) {
va_start(ap, fmt);
if ( !log_opened ) {
openlog("vmpsd", LOG_CONS, LOG_LOCAL6);
log_opened = 1;
}
vsnprintf(str, 256, fmt, ap);
syslog(LOG_INFO, str); // here is the bug
|
|
|
|
|
