Red Hat 'allegro-tools ''' err () 'function Format String Vulnerability

Vulnerability Release Date:
Vulnerability Update Time:
 
Vulnerability cause
Input verification error
Hazard level
Low
 
Impact System
Red Hat Fedora 14
Red Hat allegro-tools 4.2.3
 
Unaffected System
 
Hazards
Local attackers can exploit the vulnerability to escalate privileges.
 
Attack Conditions
Attackers must access the system where Red Hat allegro-tools is located.
 
Vulnerability Information
Red Hat is a Linux kernel-based operating system.
The Red Hat allegro-tools tool has a format string error. The problem is caused by the code in the pack. c file:
Static void err (char * s1, char * s2)
{
......
If (s2)
Printf (s2 );
......
}
.......
F1 = argv [1];
.......
If (! In ){
Err ("can't open", f1 );
Return 1;
}
Attackers can exploit typical Format String errors to launch attacks and execute arbitrary commands in the application security context.