Pavuk Multiple Unspecified Remote Buffer Overflow Vulnerabilities
BID:11626
Info
Pavuk Multiple Unspecified Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 11626 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2004-0456 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 08 2004 12:00AM |
| Updated: | Jul 12 2009 08:06AM |
| Credit: | The vendor disclosed these issues. |
| Vulnerable: |
Pavuk Pavuk 0.9 pl30b Pavuk Pavuk 0.9 pl28 Pavuk Pavuk 0.9pl28i Pavuk Pavuk 0.928r2 Pavuk Pavuk 0.928r1 Gentoo Linux |
| Not Vulnerable: |
Pavuk Pavuk 0.9.31 |
Discussion
Pavuk Multiple Unspecified Remote Buffer Overflow Vulnerabilities
Pavuk is reported prone to multiple unspecified remote buffer overflow vulnerabilities. These issue exist due to insufficient boundary checks performed by the application. A remote attacker may exploit these vulnerabilities to cause a denial of service condition or execute arbitrary code on a vulnerable computer.
In addition to these vulnerabilities, Pavuk is reported prone to other buffer overflow vulnerabilities affecting the digest authentication handler and the HTTP header processing functionality. It is likely that these issues are related to BIDS 10633 and 10797. This information cannot be confirmed at the moment. This BID will be updated as more information becomes available.
Pavuk versions 0.9pl30b and prior are affected by these vulnerabilities.
Pavuk is reported prone to multiple unspecified remote buffer overflow vulnerabilities. These issue exist due to insufficient boundary checks performed by the application. A remote attacker may exploit these vulnerabilities to cause a denial of service condition or execute arbitrary code on a vulnerable computer.
In addition to these vulnerabilities, Pavuk is reported prone to other buffer overflow vulnerabilities affecting the digest authentication handler and the HTTP header processing functionality. It is likely that these issues are related to BIDS 10633 and 10797. This information cannot be confirmed at the moment. This BID will be updated as more information becomes available.
Pavuk versions 0.9pl30b and prior are affected by these vulnerabilities.
Exploit / POC
Pavuk Multiple Unspecified Remote Buffer Overflow Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Pavuk Multiple Unspecified Remote Buffer Overflow Vulnerabilities
Solution:
The vendor has released Pavuk Web Spider and Performance Measure 0.9.31 to address this issue.
Gentoo Linux has released advisory GLSA 200411-19 to address this issue. Users of affected packages are urged to execute the following commands with superuser privileges:
emerge --sync
emerge --ask --oneshot --verbose ">=net-misc/pavuk-0.9.31"
Please see the referenced advisory for further information.
Pavuk Pavuk 0.928r1
Pavuk Pavuk 0.9pl28i
Pavuk Pavuk 0.928r2
Pavuk Pavuk 0.9 pl30b
Pavuk Pavuk 0.9 pl28
Solution:
The vendor has released Pavuk Web Spider and Performance Measure 0.9.31 to address this issue.
Gentoo Linux has released advisory GLSA 200411-19 to address this issue. Users of affected packages are urged to execute the following commands with superuser privileges:
emerge --sync
emerge --ask --oneshot --verbose ">=net-misc/pavuk-0.9.31"
Please see the referenced advisory for further information.
Pavuk Pavuk 0.928r1
-
Pavuk pavuk-0.9.31.tar.gz
http://prdownloads.sourceforge.net/pavuk/pavuk-0.9.31.tar.gz?download
Pavuk Pavuk 0.9pl28i
-
Pavuk pavuk-0.9.31.tar.gz
http://prdownloads.sourceforge.net/pavuk/pavuk-0.9.31.tar.gz?download
Pavuk Pavuk 0.928r2
-
Pavuk pavuk-0.9.31.tar.gz
http://prdownloads.sourceforge.net/pavuk/pavuk-0.9.31.tar.gz?download
Pavuk Pavuk 0.9 pl30b
-
Pavuk pavuk-0.9.31.tar.gz
http://prdownloads.sourceforge.net/pavuk/pavuk-0.9.31.tar.gz?download
Pavuk Pavuk 0.9 pl28
-
Pavuk pavuk-0.9.31.tar.gz
http://prdownloads.sourceforge.net/pavuk/pavuk-0.9.31.tar.gz?download
References
Pavuk Multiple Unspecified Remote Buffer Overflow Vulnerabilities
References:
References:
- Home Page (Pavuk Web Spider and Performance Measure)