SB2009061301 - Remote code execution in Compress::Raw::Zlib Perl module

Description

This security bulletin contains information about 1 security vulnerability.

1) Off-by-one error (CVE-ID: CVE-2009-1391)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to off-by-one error in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017 when processing specially crafted zlib archives. A remote attacker can pass a specially crafted zlib archive to vulnerable application, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation may allow an attacker to compromise vulnerable system.

Note: this vulnerability is being actively exploited in the wild against AMaViS and SpamAssassin, which use vulnerable Perl module.

Remediation

Install update from vendor's website.

References

• https://bugzilla.redhat.com/show_bug.cgi?id=504386
• http://code.activestate.com/lists/activeperl/%3c00e401ca276c$9deaea50$d9c0bef0$@com%3e/