VULHUB ™

Minicom is a serial communication utility, often used to simplify dialup connections for UNIX hosts. It is included with many popular UNIX and UNIX derivative operating systems, and is a clone of the original Telix program for MS-DOS. A problem in the design of the software makes it vulnerable to a format string attack. By executing the software, and attempting to send a file via xmodem with a format identifier in the name, it is possible exploit this format string vulnerability. This makes it possible for a local user to gain an elevation of privileges equal to uucp. Caldera Systems reports that OpenLinux does not permit exploitation of this vulnerability to yield root privilege to the attacker.

Minicom is a serial communication utility, often used to simplify dialup connections for UNIX hosts. It is included with many popular UNIX and UNIX derivative operating systems, and is a clone of the original Telix program for MS-DOS. A problem in the design of the software makes it vulnerable to a format string attack. By executing the software, and attempting to send a file via xmodem with a format identifier in the name, it is possible exploit this format string vulnerability. This makes it possible for a local user to gain an elevation of privileges equal to uucp. Caldera Systems reports that OpenLinux does not permit exploitation of this vulnerability to yield root privilege to the attacker.