Multiple Stack Protection Scheme Evasion Weakness
BID:10737
Info
Multiple Stack Protection Scheme Evasion Weakness
| Bugtraq ID: | 10737 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jul 16 2004 12:00AM |
| Updated: | Jul 16 2004 12:00AM |
| Credit: | Discovery of this issue is credited to Jamie Butler <[email protected]> as well as two other anonymous individuals. |
| Vulnerable: |
Okena StormWatch 2.1 Okena StormWatch 2.0 Okena StormWatch McAfee Entercept Web Server Edition McAfee Entercept Standard Edition McAfee Entercept Management System McAfee Entercept Database Edition Entercept Security Technologies Entercept Agent 2.5 _win32 |
| Not Vulnerable: | |
Discussion
Multiple Stack Protection Scheme Evasion Weakness
A number of commercial security systems for Microsoft Windows operating systems exist that are designed to detect stack overflows. A paper has been released recently outlining a number of weaknesses in certain stack protection schemes employed by various security software products.
It is reported that many possible weaknesses exist that may allow an attacker to bypass stack-based protection provided by security software. This may lead to a false sense of security.
For more information please see the referenced paper.
A number of commercial security systems for Microsoft Windows operating systems exist that are designed to detect stack overflows. A paper has been released recently outlining a number of weaknesses in certain stack protection schemes employed by various security software products.
It is reported that many possible weaknesses exist that may allow an attacker to bypass stack-based protection provided by security software. This may lead to a false sense of security.
For more information please see the referenced paper.
Exploit / POC
Multiple Stack Protection Scheme Evasion Weakness
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Multiple Stack Protection Scheme Evasion Weakness
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Multiple Stack Protection Scheme Evasion Weakness
References:
References: