Rosiello Security RPF Multiple Remote And Local Vulnerabilities
BID:12073
Info
Rosiello Security RPF Multiple Remote And Local Vulnerabilities
| Bugtraq ID: | 12073 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 21 2004 12:00AM |
| Updated: | Dec 21 2004 12:00AM |
| Credit: | Slotto Corleone <[email protected]> and the De_aap security team are credited with the discovery of these issues. |
| Vulnerable: |
Rosiello Security rpf 1.2.2 |
| Not Vulnerable: | |
Discussion
Rosiello Security RPF Multiple Remote And Local Vulnerabilities
A remote buffer overflow and a local symbolic link vulnerability reportedly affect Rosiello Security rpf. These issues are due to a failure of the application to properly validate user-supplied string lengths and a design error facilitating local symbolic link attacks.
The buffer overflow will allow a remote attacker execute arbitrary code with the privileges of a user running the vulnerable application, facilitating unauthorized access and privilege escalation. An attacker may leverage the symbolic link issue to corrupt arbitrary files with the privileges of the user that activated the affected application.
A remote buffer overflow and a local symbolic link vulnerability reportedly affect Rosiello Security rpf. These issues are due to a failure of the application to properly validate user-supplied string lengths and a design error facilitating local symbolic link attacks.
The buffer overflow will allow a remote attacker execute arbitrary code with the privileges of a user running the vulnerable application, facilitating unauthorized access and privilege escalation. An attacker may leverage the symbolic link issue to corrupt arbitrary files with the privileges of the user that activated the affected application.
Exploit / POC
Rosiello Security RPF Multiple Remote And Local Vulnerabilities
An exploit has been created to leverage these issues, although it is not known to be publicly circulating.
An exploit has been created to leverage these issues, although it is not known to be publicly circulating.
Solution / Fix
Rosiello Security RPF Multiple Remote And Local Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Rosiello Security RPF Multiple Remote And Local Vulnerabilities
References:
References:
- Projects Page (Rosiello Security)
- rpf Project Home Page (Rosiello Security)
- Vendor Home Page (Rosiello Security)