Executive Summary
| Summary | |
|---|---|
| Title | TIFF library tool vulnerability |
| Informations | |||
|---|---|---|---|
| Name | USN-54-1 | First vendor Publication | 2005-01-06 |
| Vendor | Ubuntu | Last vendor Modification | 2005-01-06 |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:H/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 5.1 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | High |
| Cvss Expoit Score | 4.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) The following packages are affected: libtiff-tools The problem can be corrected by upgrading the affected package to version 3.6.1-1.1ubuntu1.2. In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Dmitry V. Levin discovered a buffer overflow in the "tiffdump" utility. If an attacker tricked a user into processing a malicious TIFF image with tiffdump, they could cause a buffer overflow which at least causes the program to crash. However, it is not entirely clear whether this can be exploited to execute arbitrary code with the privileges of the user opening the image. |
Original Source
| Url : http://www.ubuntu.com/usn/USN-54-1 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:9743 | |||
| Oval ID: | oval:org.mitre.oval:def:9743 | ||
| Title: | Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file. | ||
| Description: | Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2004-1183 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200501-06 (tiff) File : nvt/glsa_200501_06.nasl |
| 2008-09-04 | Name : FreeBSD Ports: tiff File : nvt/freebsd_tiff0.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 626-1 (tiff) File : nvt/deb_626_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 12724 | LibTIFF tiffdump Utility Overflow A remote overflow exists in LibTIFF. LibTIFF fails to properly check into to the tiffdump utility resulting in a integer overflow. With a specially crafted request, an attacker can cause execution of arbitrary code resulting in a loss of integrity. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-01-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-54-1.nasl - Type : ACT_GATHER_INFO |
| 2005-07-13 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_8f86d8b5602511d9a9e70001020eed82.nasl - Type : ACT_GATHER_INFO |
| 2005-03-06 | Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2005-052.nasl - Type : ACT_GATHER_INFO |
| 2005-02-22 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2005-035.nasl - Type : ACT_GATHER_INFO |
| 2005-02-14 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200501-06.nasl - Type : ACT_GATHER_INFO |
| 2005-02-03 | Name : The remote host is missing a vendor-supplied security patch File : suse_SA_2005_001.nasl - Type : ACT_GATHER_INFO |
| 2005-01-13 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2005-019.nasl - Type : ACT_GATHER_INFO |
| 2005-01-07 | Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2005-001.nasl - Type : ACT_GATHER_INFO |
| 2005-01-07 | Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2005-002.nasl - Type : ACT_GATHER_INFO |
| 2005-01-06 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-626.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 12:04:44 |
|
| 2013-05-11 12:26:05 |
|
