Sun Java System Web Proxy Server Multiple Unspecified Buffer Overflow Vulnerabilities
BID:11566
Info
Sun Java System Web Proxy Server Multiple Unspecified Buffer Overflow Vulnerabilities
| Bugtraq ID: | 11566 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2004-1350 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 30 2004 12:00AM |
| Updated: | Jul 12 2009 08:06AM |
| Credit: | Matt Moore of Pentest Limited reported these vulnerabilities to the vendor. |
| Vulnerable: |
Sun Java Web Proxy Server 3.6 SP4 Sun Java Web Proxy Server 3.6 SP3 Sun Java Web Proxy Server 3.6 SP2 Sun Java Web Proxy Server 3.6 SP1 Sun Java Web Proxy Server 3.6 |
| Not Vulnerable: |
Sun Java Web Proxy Server 3.6 SP5 |
Discussion
Sun Java System Web Proxy Server Multiple Unspecified Buffer Overflow Vulnerabilities
It is reported that Sun Java System Web Proxy Server, and its Administration Server application are susceptible to multiple unspecified buffer overflow vulnerabilities. These issues are due to a failure of the application to properly perform bounds checks prior to copying user-supplied data into memory buffers.
These vulnerabilities reportedly allow remote attackers to execute arbitrary code in the context of the affected application. Unsuccessful attempts to exploit these vulnerabilities will likely result in the application crashing, denying service to legitimate users.
The Web proxy server is configured to run as 'nobody' by default, and the Administration Server is configured to run as 'root'. By exploiting vulnerabilities in the Administration Server, attackers may execute arbitrary code with superuser privileges.
It is reported that Sun Java System Web Proxy Server, and its Administration Server application are susceptible to multiple unspecified buffer overflow vulnerabilities. These issues are due to a failure of the application to properly perform bounds checks prior to copying user-supplied data into memory buffers.
These vulnerabilities reportedly allow remote attackers to execute arbitrary code in the context of the affected application. Unsuccessful attempts to exploit these vulnerabilities will likely result in the application crashing, denying service to legitimate users.
The Web proxy server is configured to run as 'nobody' by default, and the Administration Server is configured to run as 'root'. By exploiting vulnerabilities in the Administration Server, attackers may execute arbitrary code with superuser privileges.
Exploit / POC
Sun Java System Web Proxy Server Multiple Unspecified Buffer Overflow Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Sun Java System Web Proxy Server Multiple Unspecified Buffer Overflow Vulnerabilities
Solution:
The vendor has released an advisory (Sun Alert ID #57606), as well as a service pack to address this issue. Please see the referenced alert for further information.
Sun Java Web Proxy Server 3.6 SP2
Sun Java Web Proxy Server 3.6 SP1
Sun Java Web Proxy Server 3.6 SP3
Sun Java Web Proxy Server 3.6 SP4
Sun Java Web Proxy Server 3.6
Solution:
The vendor has released an advisory (Sun Alert ID #57606), as well as a service pack to address this issue. Please see the referenced alert for further information.
Sun Java Web Proxy Server 3.6 SP2
-
Sun Java Web Proxy Server 3.6 Service Pack 5
http://wwws.sun.com/software/download/products/4096ba15.html
Sun Java Web Proxy Server 3.6 SP1
-
Sun Java Web Proxy Server 3.6 Service Pack 5
http://wwws.sun.com/software/download/products/4096ba15.html
Sun Java Web Proxy Server 3.6 SP3
-
Sun Java Web Proxy Server 3.6 Service Pack 5
http://wwws.sun.com/software/download/products/4096ba15.html
Sun Java Web Proxy Server 3.6 SP4
-
Sun Java Web Proxy Server 3.6 Service Pack 5
http://wwws.sun.com/software/download/products/4096ba15.html
Sun Java Web Proxy Server 3.6
-
Sun Java Web Proxy Server 3.6 Service Pack 5
http://wwws.sun.com/software/download/products/4096ba15.html
References
Sun Java System Web Proxy Server Multiple Unspecified Buffer Overflow Vulnerabilities
References:
References:
- Sun Alert ID: 57606 - Buffer Overflow Vulnerabilities in Sun Java System Web Pro (Sun Microsystems)
- Sun Java System Web Proxy Server 3.6 Product Page (Sun Microsystems)