Citadel/UX Username Buffer Overflow Vulnerability
BID:10833
Info
Citadel/UX Username Buffer Overflow Vulnerability
| Bugtraq ID: | 10833 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 30 2004 12:00AM |
| Updated: | Jul 30 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to CoKi <[email protected]>. |
| Vulnerable: |
Citadel/UX Citadel/UX 6.23 Citadel/UX Citadel/UX 6.0 8 Citadel/UX Citadel/UX 6.0 7 Citadel/UX Citadel/UX 5.91 Citadel/UX Citadel/UX 5.90 |
| Not Vulnerable: | |
Discussion
Citadel/UX Username Buffer Overflow Vulnerability
A buffer overrun vulnerability is reported for Citadel/UX. The problem occurs due to insufficient bounds checking when processing 'USER' command arguments.
An anonymous remote attacker may be capable of exploiting this issue to execute arbitrary code. This however has not been confirmed. Failed exploit attempts may result in a denial of service.
A buffer overrun vulnerability is reported for Citadel/UX. The problem occurs due to insufficient bounds checking when processing 'USER' command arguments.
An anonymous remote attacker may be capable of exploiting this issue to execute arbitrary code. This however has not been confirmed. Failed exploit attempts may result in a denial of service.
Exploit / POC
Citadel/UX Username Buffer Overflow Vulnerability
The following proof of concept is available:
The following proof of concept is available:
Solution / Fix
Citadel/UX Username Buffer Overflow Vulnerability
Solution:
It is reported that the vendor has addressed this issue; the fix exists in the CVS tree. It is reported that the fix will be included in the next release of Citadel/UX this is not confirmed.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
It is reported that the vendor has addressed this issue; the fix exists in the CVS tree. It is reported that the fix will be included in the next release of Citadel/UX this is not confirmed.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Citadel/UX Username Buffer Overflow Vulnerability
References:
References:
- Citadel/UX Homepage (Citadel/UX)
- Citadel/UX Remote DoS Vulnerability (CoKi
- Re: Citadel/UX Remote DoS Vulnerability ([email protected] (IO ERROR))