Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow attackers to execute arbitrary code.

This update fixes the following security problem: libgda contained two format string bugs in logging routines. Those bugs could potentially indirectly lead to arbitrary code execution via applications that link against libgda and supply data to libgda. (CVE-2005-2958)

Steve Kemp discovered two format string vulnerabilities in libgda2, the GNOME Data Access library for GNOME2, which may lead to the execution of arbitrary code in programs that use this library.

Steve Kemp discovered two format string vulnerabilities in the logging handler of the Gnome database access library. Depending on the application that uses the library, this could have been exploited to execute arbitrary code with the permission of the user running the application.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Steve Kemp discovered two format string vulnerabilities in libgda2, the GNOME Data Access library for GNOME2, which may lead to the execution of arbitrary code in programs that use this library.

The updated packages have been patched to correct this issue.

- Wed Oct 26 2005 Caolan McNamara <caolanm at redhat.com>     1:1.0.4-3.1

    - CVE-2005-2958 libgda format string issue

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200511-01 (libgda: Format string vulnerabilities)

    Steve Kemp discovered two format string vulnerabilities in the     gda_log_error and gda_log_message functions. Some applications may pass     untrusted input to those functions and be vulnerable.
  Impact :

    An attacker could pass malicious input to an application making     use of the vulnerable libgda functions, potentially resulting in the     execution of arbitrary code with the rights of that application.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
41082	SuSE9 Security Update : libgda (YOU Patch Number 10554)	Nessus	SuSE Local Security Checks	high
22737	Debian DSA-871-2 : libgda2 - format string	Nessus	Debian Local Security Checks	high
20630	Ubuntu 4.10 / 5.04 / 5.10 : libgda2 vulnerability (USN-212-1)	Nessus	Ubuntu Local Security Checks	high
20438	Mandrake Linux Security Advisory : gda2.0 (MDKSA-2005:203)	Nessus	Mandriva Local Security Checks	high
20164	Fedora Core 3 : libgda-1.0.4-3.1 (2005-1029)	Nessus	Fedora Local Security Checks	high
20140	GLSA-200511-01 : libgda: Format string vulnerabilities	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2005-2958

critical

Tenable Plugins

high

high

high

high

high

high