Dr.Cat Drcatd Multiple Local Buffer Overflow Vulnerabilities

Bugtraq ID:	10608
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 25 2004 12:00AM
Updated:	Jun 25 2004 12:00AM
Credit:	Discovery is credited to Khan Shirani <[email protected]>.
Vulnerable:	Dr. Cat Dr. Cat 0.5 .0-beta
Not Vulnerable:

Dr.Cat Drcatd Multiple Local Buffer Overflow Vulnerabilities

Dr.Cat is reported prone to multiple local buffer overflow vulnerabilities. These vulnerabilities exist due to insufficient boundary checks performed by certain functions of the application. These vulnerabilities may allow a local attacker to gain uanuthorized access and/or elevated privileges on a vulnerable computer.

An attacker may also be able to exploit this issue remotely, however, this cannot be confirmed at the moment.

All versions of the application are considered to be vulnerable at this moment.

Dr.Cat Drcatd Multiple Local Buffer Overflow Vulnerabilities

The following exploit has been released:

• /data/vulnerabilities/exploits/drcat.c

Dr.Cat Drcatd Multiple Local Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Dr.Cat Drcatd Multiple Local Buffer Overflow Vulnerabilities

References:

• Dr. Cat Homepage (Dr. Cat)
  
• multiple remote & local buffer overflows discovered in Drcatd (Khan Shirani )