21-6 Productions Orbz Remote Buffer Overflow Vulnerability

Bugtraq ID:	11774
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 29 2004 12:00AM
Updated:	Nov 29 2004 12:00AM
Credit:	Luigi Auriemma <[email protected]> is credited with the discovery of this issue.
Vulnerable:	21-6 Productions Orbz 2.10 21-6 Productions Orbz 2.9 21-6 Productions Orbz 2.8 21-6 Productions Orbz 2.7 21-6 Productions Orbz 2.6 21-6 Productions Orbz 2.5
Not Vulnerable:

21-6 Productions Orbz Remote Buffer Overflow Vulnerability

A remote buffer overflow vulnerability has been reported in 21-6 Productions Orbz. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into finite process buffers.

An attacker may exploit this issue to execute arbitrary code with the privileges of the user that activated the vulnerable application. This may facilitate unauthorized access or privilege escalation.

21-6 Productions Orbz Remote Buffer Overflow Vulnerability

The following exploit has been provided:

• /data/vulnerabilities/exploits/orbzbof.zip

21-6 Productions Orbz Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

21-6 Productions Orbz Remote Buffer Overflow Vulnerability

References:

• Orbz Home Page (21-6 Productions)
  
• Buffer-overflow in Orbz 2.10 (Luigi Auriemma )