Vulnerability Development: GNU objdump 2.15 [FreeBSD] 2004-05-23 shows: ... "BFD: Please report this bug." While analyzing crafted ELF.

[david.reguera () inteco es]

NU objdump 2.15 [FreeBSD] 2004-05-23 shows:
BFD: BFD 2.15 [FreeBSD] 2004-05-23 internal error, aborting at
/usr/src/gnu/usr.bin/binutils/libbfd/../../../../contrib/binutils/bfd/
elfcode.h line 188 in bfd_elf32_swap_symbol_in

BFD: Please report this bug.

While analyzing crafted ELF.

Note: this bug (in my opinion) is irrelevant, the exception is captured
by the library exception handler. I am reporting it because of the
message:
BFD: Please report this bug.

Affected Version:
GNU objdump 2.15 [FreeBSD] 2004-05-23 [TESTED & FOUND]

Affected OS:
FreeBSD 6.3 [TESTED & FOUND]
FreeBSD 6.2 [TESTED & FOUND]

Discovered By : INTECO-CERT, David Reguera Garcia, david.reguera () inteco es
POC exploit by : INTECO-CERT, David Reguera Garcia, david.reguera () inteco es

Remote : NO
Execution of code : NO
Privilege scalation : NO

The POC "exploit?" is avaible: http://fr33project.org/vulnsexpl/Exploits/Objdump_bin_120946/exploit.c

Report: http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/120946