FreeBSD : monotone -- remote denial of service in default setup (c9a6ae4a-df8b-11df-9573-00262d5ed8ee)

NASLDB: FreeBSD : monotone -- remote denial of service in default setup (c9a6ae4a-df8b-11df-9573-00262d5ed8ee)

General

ID: 50320
Name: FreeBSD : monotone — remote denial of service in default setup (c9a6ae4a-df8b-11df-9573-00262d5ed8ee)

Summary: Checks for updated package in pkg_info output

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: –
CVSS Temporal Vector: –

Port: 0
Family: FreeBSD Local Security Checks
Type: Local

Description

The monotone developers report :

Running ‘mtn ‘’‘ or ‘mtn ls ‘’‘ doesn’t cause an internal error
anymore. In monotone 0.48 and earlier this behavior could be used to
crash a server remotely (but only if it was configured to allow
execution of remote commands).

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: –
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2010/10/21
Patch Release: 2010/10/24
Plugin Release: 2010/10/25

Plugin

Version: 1.4
Filename: freebsd_pkg_c9a6ae4adf8b11df957300262d5ed8ee.nasl
Filesize: 4558 bytes
MD5 Hash: 6cf5dc540142525e00edaad256bd136c

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info
Dependencies: "ssh_get_info.nasl"