Rosiello Security Sphiro HTTPD Remote Heap Buffer Overflow Vulnerability

Bugtraq ID:	10249
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 30 2004 12:00AM
Updated:	Apr 30 2004 12:00AM
Credit:	Discovery of this issue is credited to Slotto Corleone <[email protected]>.
Vulnerable:	Rosiello Security Sphiro HTTPD 0.1 B
Not Vulnerable:

Rosiello Security Sphiro HTTPD Remote Heap Buffer Overflow Vulnerability

It has been reported that Sphiro HTTPD is prone to a remote heap based buffer overflow vulnerability. This issue is due to a failure of the application to properly verify buffer boundaries before storing input in fixed buffers.

Immediate consequences of this attack may cause the affected daemon to crash, denying service to legitimate users. Furthermore, due to the nature this issue, arbitrary code execution may be possible. This would occur in the context running daemon process.

Rosiello Security Sphiro HTTPD Remote Heap Buffer Overflow Vulnerability

The following proof of concept has been provided:

perl -e 'print "GET HTTP/1.1" . "A"x1000 . "\n\n"' |nc www.example.com 80

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Rosiello Security Sphiro HTTPD Remote Heap Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Rosiello Security Sphiro HTTPD Remote Heap Buffer Overflow Vulnerability

References:

• Vendor Home Page (Rosiello Security)