Realsecure CGI Attack Subversion Vulnerability
BID:1023
Info
Realsecure CGI Attack Subversion Vulnerability
| Bugtraq ID: | 1023 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Mar 01 2000 12:00AM |
| Updated: | Mar 01 2000 12:00AM |
| Credit: | This vulnerability was discovered by Stephane AUBERT <[email protected]> and posted to the Bugtraq mailing list on February 29, 2000. |
| Vulnerable: |
Internet Security Systems RealSecure 3.2.1999 Internet Security Systems RealSecure 3.2 Internet Security Systems RealSecure 3.1 Internet Security Systems RealSecure 3.0 |
| Not Vulnerable: | |
Exploit / POC
Realsecure CGI Attack Subversion Vulnerability
./whisker.pl -h xxx.yyy.zzz.ttt -I 1246
./whisker.pl -h xxx.yyy.zzz.ttt -I 0 -M 2
./whisker.pl -h xxx.yyy.zzz.ttt -I 6 -M 2
./whisker.pl -h xxx.yyy.zzz.ttt -I 60 -M 2
Please see the 'Credit' section of this entry for the URL to the Whisker scanning tool.
./whisker.pl -h xxx.yyy.zzz.ttt -I 1246
./whisker.pl -h xxx.yyy.zzz.ttt -I 0 -M 2
./whisker.pl -h xxx.yyy.zzz.ttt -I 6 -M 2
./whisker.pl -h xxx.yyy.zzz.ttt -I 60 -M 2
Please see the 'Credit' section of this entry for the URL to the Whisker scanning tool.
Solution / Fix
Realsecure CGI Attack Subversion Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Internet Security Systems was notified of this problem on February 14, 2000. Their response was as follows:
"Thanks for your in depth analysis of our RealSecure Teardrop signature. We rarely get such detailed reports and they are very much appreciated. Now that we are aware of the issue, we've logged this as a bug so we can address it in an upcoming release.
We haven't tested RealSecure against Whisker, but now that brought this to our attention we can add it to our product test plan. We work very hard to test our products against as many known attacks as possible and information like this allows us to improve our test plan with every release.
Please feel free to provide us feedback like this in the future as it helps us make a better product for all our customers."
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Internet Security Systems was notified of this problem on February 14, 2000. Their response was as follows:
"Thanks for your in depth analysis of our RealSecure Teardrop signature. We rarely get such detailed reports and they are very much appreciated. Now that we are aware of the issue, we've logged this as a bug so we can address it in an upcoming release.
We haven't tested RealSecure against Whisker, but now that brought this to our attention we can add it to our product test plan. We work very hard to test our products against as many known attacks as possible and information like this allows us to improve our test plan with every release.
Please feel free to provide us feedback like this in the future as it helps us make a better product for all our customers."
References
Realsecure CGI Attack Subversion Vulnerability
References:
References:
- Internet Security Systems (ISS)
- whisker v1.3.0a (RFP)