VyPRESS Messenger Remote Buffer Overflow Vulnerability

Bugtraq ID:	11310
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 01 2004 12:00AM
Updated:	Oct 01 2004 12:00AM
Credit:	Discovery of this issue is credited to Luigi Auriemma <[email protected]>.
Vulnerable:	VyPRESS Messenger 3.5.1 VyPRESS Messenger 3.5
Not Vulnerable:	VyPRESS Messenger 4.0 RC1

VyPRESS Messenger Remote Buffer Overflow Vulnerability

VyPRESS Messenger is affected by a remote buffer overflow vulnerability. This issue is due to a failure of the application to verify the length of user-supplied strings prior to copying them into finite process buffers.

An attacker may leverage this issue to remotely execute arbitrary machine code on an affected computer with the privileges of the user running the affected application. It is possible to exploit all hosts on a local area network by sending a message to a broadcast address.

VyPRESS Messenger Remote Buffer Overflow Vulnerability

The following proof of concept exploit has been made available:

• /data/vulnerabilities/exploits/VypressMessenger_BO_POC.zip

VyPRESS Messenger Remote Buffer Overflow Vulnerability

Solution:
VyPRESS has released version 4.0 RC1 of the affected software dealing with this issue.


VyPRESS Messenger 3.5

• VyPRESS Messenger 4.0 RC1
  http://www.vypress.com/ftp/betas/VyMes40rc1.msi

VyPRESS Messenger 3.5.1

• VyPRESS Messenger 4.0 RC1
  http://www.vypress.com/ftp/betas/VyMes40rc1.msi

VyPRESS Messenger Remote Buffer Overflow Vulnerability

References:

• Messenger Home Page (VyPRESS)
  
• Broadcast buffer-overflow in Vypress Messenger 3.5.1 (Luigi Auriemma )