PT-2009-5479 · Silc · Silc Toolkit+1

Nico Golde · Published 2009-09-10 · Updated 2012-10-23 · CVE-2009-3163

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: SILC Toolkit versions prior to 1.1.10 SILC Client versions prior to 1.1.9

Description: The issue is related to multiple format string vulnerabilities in the SILC Toolkit and SILC Client. These vulnerabilities allow remote attackers to execute arbitrary code via format string specifiers in a channel name. The affected functions include silc client command topic, silc client command kick, silc client command leave, and silc client command users.

Recommendations: For SILC Toolkit versions prior to 1.1.10, update to version 1.1.10 or later. For SILC Client versions prior to 1.1.9, update to version 1.1.9 or later. As a temporary workaround, consider restricting access to the channel name parameter to minimize the risk of exploitation.

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2009-3163

DSA-1879-1

Affected Products

Silc Client

Silc Toolkit

References · 10

• http://debian.org/security/2009/dsa-1879 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:234 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3163 · Security Note
• http://secunia.com/advisories/36614 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:235 · Vendor Advisory
• http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10 · Note
• http://openwall.com/lists/oss-security/2009/09/03/5 · Note
• http://openwall.com/lists/oss-security/2009/08/31/5 · Note
• http://securityfocus.com/bid/36193 · Note
• http://silcnet.org/general/news/news_toolkit.php · Note