HAURI Anti-Virus ACE Archive Handling Remote Buffer Overflow Vulnerability
BID:14647
Info
HAURI Anti-Virus ACE Archive Handling Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 14647 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 24 2005 12:00AM |
| Updated: | Feb 07 2006 08:54PM |
| Credit: | Discovery is credited to Tan Chew Keong with Secunia Research. |
| Vulnerable: |
Raven Software Soldier Of Fortune 2 0 Hauri ViRobot Linux Server 2.0 Hauri ViRobot Expert 4.0 Hauri LiveCall |
| Not Vulnerable: | |
Discussion
HAURI Anti-Virus ACE Archive Handling Remote Buffer Overflow Vulnerability
HAURI Anti-Virus is affected by a remote buffer overflow vulnerability when handling ACE archives.
An attacker can exploit this issue by crafting a malicious ACE archive containing a specially crafted file name and sending this archive to a vulnerable computer.
The attacker may exploit this vulnerability to gain unauthorized remote access in the context of the superuser.
HAURI Anti-Virus is affected by a remote buffer overflow vulnerability when handling ACE archives.
An attacker can exploit this issue by crafting a malicious ACE archive containing a specially crafted file name and sending this archive to a vulnerable computer.
The attacker may exploit this vulnerability to gain unauthorized remote access in the context of the superuser.
Exploit / POC
HAURI Anti-Virus ACE Archive Handling Remote Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
HAURI Anti-Virus ACE Archive Handling Remote Buffer Overflow Vulnerability
Solution:
The vendor has released patches to address this issue in ViRobot Linux Server 2.0. Users running ViRobot Expert 4.0 and ViRobot Advanced Server can upgrade to vrazmain.dll version 5.8.22.137 through the online update functionality of the application. HAURI LiveCall users can upgrade to vrazmain.dll version 5.8.22.137 through the LiveCall Website.
Hauri ViRobot Linux Server 2.0
Solution:
The vendor has released patches to address this issue in ViRobot Linux Server 2.0. Users running ViRobot Expert 4.0 and ViRobot Advanced Server can upgrade to vrazmain.dll version 5.8.22.137 through the online update functionality of the application. HAURI LiveCall users can upgrade to vrazmain.dll version 5.8.22.137 through the LiveCall Website.
Hauri ViRobot Linux Server 2.0
-
Hauri ViRobot Unix/Linux Server Security Vulnerability Patch
http://www.globalhauri.com/html/download/down_unixpatch.html
References
HAURI Anti-Virus ACE Archive Handling Remote Buffer Overflow Vulnerability
References:
References:
- HAURI Anti-Virus ACE Archive Handling Buffer Overflow (Secunia)
- Vendor Homepage (HAURI)