Re: CVE request / advisory: gdomap (GNUstep core package <= 1.24.6)

[cve-assign () mitre org]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> gdomap (GNUstep Distributed Objects nameserver)

> After receiving a crafted invalid request, gdomap will attempt to log
> an error message to the system logger. However, due to incorrect setup
> of the logger during server initialization, the logger and gdomap
> itself will mess up program state enough that program execution will
> be aborted. gdomap listens to all interfaces, allowing a remote
> unauthenticated attacker to DOS the nameserver.

> https://savannah.gnu.org/bugs/?41751
> http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/Tools/gdomap.c?r1=37756&r2=37755&pathrev=37756
> http://svn.gna.org/viewcvs/gnustep/libs/base/trunk/ChangeLog?r1=37756&r2=37755&pathrev=37756

> closes the fd that openlog() just made ... this closed fd's number is
> re-used for gdomap's UDP listening socket ... then closes what it
> thinks is still its fd (but is actually now the UDP listening socket
> mentioned above)

> Tools/gdomap.c: Don't open syslog connection until after we have
> forked and closed old descriptors .. fix for bug #41751

Use CVE-2014-2980.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJTVcIOAAoJEKllVAevmvmsBEkH/jdrTeZ3gB0ESGkNFChbtmXx
6BC5CzThnaeLhtDWx67GHE1TSpxyCJQLJtnocZwn9Z4E97UbLUR/EuD2bBlnsavE
/BsVUOxZ+TAxThvwTqTRGKi/LFsJBzlfe2zZuwsXC1BNCuUAvguwBmbrDGMTFbdB
+kzVDsdLOPlTAZVB7xFirokNQFu+i367plde3MvLPeMwIB80aWJyMNjwtwPW7x91
t3jgpZ7V+3Y4eJ09JHo08mxJYqdw03c10sWRkmWqLn51IH6u7BC/gh/s6wCBsZQu
wgFQ1Mnwes+pNCgGnc8HJgH8qGphPPvS8HyI+HoVw49A++rgU1USIe6ADck12Uo=
=siER
-----END PGP SIGNATURE-----