CVE-2005-0086

Vulnerability

A heap-based buffer overflow vulnerability exists in the less file pager as shipped with Red Hat Enterprise Linux 3. The flaw is triggered when less processes a specially crafted file while running under a UTF-8 locale. This can lead to memory corruption and potential code execution. Affected versions include less packages prior to the update provided in RHSA-2005:068 [1][2].

Exploitation

An attacker can exploit this vulnerability by providing a malicious file to a victim who then opens it with less on a system configured to use a UTF-8 locale. No authentication is required, but the victim must interact by using less (e.g., scrolling through the file). The exploit leverages the heap buffer overflow to corrupt memory [2].

Impact

Successful exploitation allows the attacker to cause a denial of service (application crash) or potentially execute arbitrary code with the privileges of the user running less. This could lead to full compromise of the user's session and data [1].

Mitigation

The vulnerability is fixed in the less package updated via Red Hat Security Advisory RHSA-2005:068. Users should apply the update from Red Hat's errata. No workarounds are documented [1][2].