Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability.

Some potential mcrypt buffer overflows in the commandline tool were fixed, which could lead to early aborts of mcrypt. Due to FORTIFY_SOURCE catching such cases, it would have only aborted mcrypt with a buffer overflow backtrace.

The remote host is affected by the vulnerability described in GLSA-201405-19 (MCrypt: User-assisted execution of arbitrary code)

    Multiple vulnerabilities have been discovered in MCrypt:
      A boundary error in MCrypt could cause a stack-based buffer overflow         (CVE-2012-4409).
      MCrypt contains multiple format string errors (CVE-2012-4426).
      MCrypt does not properly handle long file names, which could cause a         stack-based buffer overflow (CVE-2012-4527).
  Impact :

    A remote attacker could entice a user to open a specially crafted file       using MCrypt, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Apply workaround for CVE-2012-4527.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
74803	openSUSE Security Update : mcrypt (openSUSE-SU-2012:1440-1)	Nessus	SuSE Local Security Checks	medium
74061	GLSA-201405-19 : MCrypt: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	medium
62850	Fedora 18 : mcrypt-2.6.8-10.fc18 (2012-17339)	Nessus	Fedora Local Security Checks	medium
62849	Fedora 16 : mcrypt-2.6.8-10.fc16 (2012-17318)	Nessus	Fedora Local Security Checks	medium
62847	Fedora 17 : mcrypt-2.6.8-10.fc17 (2012-17290)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2012-4527

critical

Tenable Plugins

medium

medium

medium

medium

medium