Bug 255353

Summary:	sys-cluster/ganglia remote stack based buffer overflow in gmetad
Product:	Gentoo Linux	Reporter:	Carlo Marcelo Arenas Belon <carenas>
Component:	Current packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED DUPLICATE
Severity:	critical
Priority:	High
Version:	unspecified
Hardware:	All
OS:	All
URL:	http://www.securityfocus.com/bid/33299/info
Whiteboard:
Package list:		Runtime testing required:	---

Description Carlo Marcelo Arenas Belon 2009-01-18 07:23:57 UTC

all versions of gmetad currently in portage are affected by a buffer overflow when handling requests through the interactive port (8652) and as shown in the linked URL.

upstream is handling this problem through in :

  http://bugzilla.ganglia.info/cgi-bin/bugzilla/show_bug.cgi?id=223

including a proposed patch which will be backported to 3.1 and 3.0 for next release.

Reproducible: Always

Steps to Reproduce:
1. /etc/init.d/gmetad start
2. echo "/`python -c \"print \\"%s/%s\\" % ('a'*300,'b'*300)\"`" |nc localhost 8652
3.

Actual Results:  
gmetad crashes with a corrupted stack which could be used (with a different payload) to execute code remotely.

Expected Results:  
gmetad ignores the invalid request

also tracked in RedHat's bugzilla in :

  https://bugzilla.redhat.com/show_bug.cgi?id=480236

Comment 1 Justin Bronder (RETIRED) gentoo-dev

2009-01-18 22:05:15 UTC

The security team was quick on the uptake.  Marking as a duplicate.  Many thanks for letting us know though!

*** This bug has been marked as a duplicate of bug 255366 ***