HP HPSOCKD Unspecified Remote Buffer Overflow Vulnerability

Bugtraq ID:	11800
Class:	Boundary Condition Error
CVE:	CVE-2004-0993
Remote:	Yes
Local:	No
Published:	Dec 03 2004 12:00AM
Updated:	Jul 12 2009 08:07AM
Credit:	Discovery is credited to infamous41md.
Vulnerable:	HP hpsockd 0.5 HP hpsockd 0.4
Not Vulnerable:	HP hpsockd 0.6

HP HPSOCKD Unspecified Remote Buffer Overflow Vulnerability

hpsockd is reported prone to an unspecified remote buffer overflow vulnerability. This issue exists due to improper boundary checks performed by the application when handling user-supplied data. It is reported that this vulnerability can be exploited to cause a denial of service condition in the application.

It may be possible to leverage this issue to execute arbitrary code on a vulnerable computer, however, this has not been confirmed.

hpsockd versions 0.5 and prior are reported prone to this vulnerability.

HP HPSOCKD Unspecified Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HP HPSOCKD Unspecified Remote Buffer Overflow Vulnerability

Solution:
Debian has released an advisory DSA 604-1 to address this issue. Please see the referenced advisory for more information.

HP HPSOCKD Unspecified Remote Buffer Overflow Vulnerability

References: