Yanf HTTP Response Buffer Overflow Vulnerability
BID:11975
Info
Yanf HTTP Response Buffer Overflow Vulnerability
| Bugtraq ID: | 11975 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2004 12:00AM |
| Updated: | Dec 15 2004 12:00AM |
| Credit: | Discovery is credited to Ariel Berkman. |
| Vulnerable: |
Yanf Yanf 0.4 |
| Not Vulnerable: | |
Discussion
Yanf HTTP Response Buffer Overflow Vulnerability
Yanf is prone to a buffer overflow vulnerability. This issue is exposed when the client reads data from a remote HTTP server.
If this issue is successfully exploited, it could allow for execution of arbitrary code in the context of the user running the client.
Yanf is prone to a buffer overflow vulnerability. This issue is exposed when the client reads data from a remote HTTP server.
If this issue is successfully exploited, it could allow for execution of arbitrary code in the context of the user running the client.
Exploit / POC
Yanf HTTP Response Buffer Overflow Vulnerability
The following example exploit has been published:
The following example exploit has been published:
Solution / Fix
Yanf HTTP Response Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Yanf HTTP Response Buffer Overflow Vulnerability
References:
References:
- [remote] [control] Yanf 0.4 get() overflows buf ("D. J. Bernstein"
- Yanf Homepage (Yanf)