Re: CVE id request: Multiple buffer overflow in unixODBC

[Tomas Hoger <thoger () redhat com>]

On Tue, 29 May 2012 09:42:42 -0300 Felipe Pena wrote:

> Multiple buffer overflow in unixODBC
> ===========================
>
> The library unixODBC doesn't check properly the input from FILEDSN=,
> DRIVER= options in the DSN, which causes buffer overflow when passed
> to the SQLDriverConnect() function.

Reports like this - covering bugs in parsing of the configuration
parameters (i.e. generally trusted input) - should include some
reasoning why these should be considered security.  Nothing obvious not
intended to break PHP safe_mode comes to mind.

-- 
Tomas Hoger / Red Hat Security Response Team