Pserv completedPath Remote Buffer Overflow Vulnerability

Bugtraq ID:	13648
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 16 2005 12:00AM
Updated:	May 16 2005 12:00AM
Credit:	Discovery credited to the RedTeam.
Vulnerable:	Pserv Pserv 3.2
Not Vulnerable:	Pserv Pserv 3.3

Pserv completedPath Remote Buffer Overflow Vulnerability

pServ is prone to a remotely exploitable buffer overflow vulnerability. The issue occurs because proper boundary checks are not performed allowing an internal buffer to be overrun. This vulnerability could potentially be exploited to execute arbitrary code in the context of the Web server.

This issue was fixed in pServ 3.3; earlier versions are likely vulnerable.

Pserv completedPath Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Pserv completedPath Remote Buffer Overflow Vulnerability

Solution:
This issue was addressed in pServ 3.3:


Pserv Pserv 3.2

• pServ pserv-3.3.tar.gz
  http://prdownloads.sourceforge.net/pserv/pserv-3.3.tar.gz?download

Pserv completedPath Remote Buffer Overflow Vulnerability

References:

• Project: pServ: Release Notes (pServ)
  
• Pserv Home Page (Pserv)