Stormy Studios KNet Remote Buffer Overflow Vulnerability

Bugtraq ID:	12671
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 26 2005 12:00AM
Updated:	Feb 26 2005 12:00AM
Credit:	"CorryL" <[email protected]> is credited with the discovery of this issue.
Vulnerable:	Stormy Studios KNet 1.4 c Stormy Studios KNet 1.4 b Stormy Studios KNet 1.3 Stormy Studios KNet 1.2 Stormy Studios KNet 1.0
Not Vulnerable:

Stormy Studios KNet Remote Buffer Overflow Vulnerability

A remote buffer overflow vulnerability affects Stormy Studios KNet. This issue is due to a failure of the application to securely copy user-supplied input into finite process buffers.

An attacker may leverage this issue to execute arbitrary code on a computer with the privileges of the affected server, facilitating unauthorized access.

Stormy Studios KNet Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

The following proof of concept has been made available:

• /data/vulnerabilities/exploits/kNetBufferOverflowPoC.c

Stormy Studios KNet Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Stormy Studios KNet Remote Buffer Overflow Vulnerability

References:

• KNet Home Page (Stormy Studios)
  
• Knet <= 1.04c Buffer Overflow Bug ("CorryL" )