Stack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2004-1287.

An updated nasm package that fixes multiple security issues is now available.

This update has been rated as having low security impact by the Red Hat Security Response Team.

NASM is an 80x86 assembler.

Two stack based buffer overflow bugs have been found in nasm. An attacker could create an ASM file in such a way that when compiled by a victim, could execute arbitrary code on their machine. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2004-1287 and CVE-2005-1194 to these issues.

All users of nasm are advised to upgrade to this updated package, which contains backported fixes for these issues.

Josh Bressers discovered a buffer overflow in the ieee_putascii() function of nasm. If an attacker tricked a user into assembling a malicious source file, they could exploit this to execute arbitrary code with the privileges of the user that runs nasm.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A buffer overflow in nasm was discovered by Josh Bressers. If an attacker could trick a user into assembling a malicious source file, they could use this vulnerability to execute arbitrary code with the privileges of the user running nasm.

The provided packages have been patched to correct these issues.

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:381 advisory.

    NASM is an 80x86 assembler.

    Two stack based buffer overflow bugs have been found in nasm. An attacker     could create an ASM file in such a way that when compiled by a victim,     could execute arbitrary code on their machine. The Common Vulnerabilities     and Exposures project (cve.mitre.org) has assigned the names CAN-2004-1287     and CAN-2005-1194 to these issues.

    All users of nasm are advised to upgrade to this updated package, which     contains backported fixes for these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
21816	CentOS 3 / 4 : nasm (CESA-2005:381)	Nessus	CentOS Local Security Checks	critical
20518	Ubuntu 4.10 / 5.04 : nasm vulnerability (USN-128-1)	Nessus	Ubuntu Local Security Checks	medium
18306	Mandrake Linux Security Advisory : nasm (MDKSA-2005:090)	Nessus	Mandriva Local Security Checks	medium
18196	RHEL 4 : nasm (RHSA-2005:381)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2005-1194

critical

Tenable Plugins

critical

medium

medium

high