Turquoise SuperStat Date Parser Remote Buffer Overflow Vulnerability
BID:14852
Info
Turquoise SuperStat Date Parser Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 14852 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2005-2658 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 15 2005 12:00AM |
| Updated: | Jul 12 2009 05:06PM |
| Credit: | Discovery is credited to Peter Karlsson. |
| Vulnerable: |
Turquoise SuperStat Turquoise SuperStat 2.2.3 Turquoise SuperStat Turquoise SuperStat 2.2.2 Turquoise SuperStat Turquoise SuperStat 2.2.1 Turquoise SuperStat Turquoise SuperStat 2.2 |
| Not Vulnerable: |
Turquoise SuperStat Turquoise SuperStat 2.2.4 |
Discussion
Turquoise SuperStat Date Parser Remote Buffer Overflow Vulnerability
Turquoise SuperStat is prone to a buffer overflow in its NNTP response mechanism.
The vulnerability presents itself when a malicious NNTP server supplies excessive data to the application that is handled by the date parsing routines.
A successful attack may result in a remote compromise.
Turquoise SuperStat is prone to a buffer overflow in its NNTP response mechanism.
The vulnerability presents itself when a malicious NNTP server supplies excessive data to the application that is handled by the date parsing routines.
A successful attack may result in a remote compromise.
Exploit / POC
Turquoise SuperStat Date Parser Remote Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Turquoise SuperStat Date Parser Remote Buffer Overflow Vulnerability
Solution:
The vendor has released an upgrade to address this issue.
Debian had released advisory DSA 812-1 to address this issue. Please see the referenced advisory for more information.
Turquoise SuperStat Turquoise SuperStat 2.2
Turquoise SuperStat Turquoise SuperStat 2.2.1
Turquoise SuperStat Turquoise SuperStat 2.2.2
Turquoise SuperStat Turquoise SuperStat 2.2.3
Solution:
The vendor has released an upgrade to address this issue.
Debian had released advisory DSA 812-1 to address this issue. Please see the referenced advisory for more information.
Turquoise SuperStat Turquoise SuperStat 2.2
-
Turquoise SuperStat turqstat_2.2.4.tar.gz
http://freshmeat.net/redir/turquoise/10809/url_tgz/turqstat_2.2.4.tar. gz
Turquoise SuperStat Turquoise SuperStat 2.2.1
-
Turquoise SuperStat turqstat_2.2.4.tar.gz
http://freshmeat.net/redir/turquoise/10809/url_tgz/turqstat_2.2.4.tar. gz
Turquoise SuperStat Turquoise SuperStat 2.2.2
-
Turquoise SuperStat turqstat_2.2.4.tar.gz
http://freshmeat.net/redir/turquoise/10809/url_tgz/turqstat_2.2.4.tar. gz
Turquoise SuperStat Turquoise SuperStat 2.2.3
-
Turquoise SuperStat turqstat_2.2.4.tar.gz
http://freshmeat.net/redir/turquoise/10809/url_tgz/turqstat_2.2.4.tar. gz
References
Turquoise SuperStat Date Parser Remote Buffer Overflow Vulnerability
References:
References:
- Turquoise SuperStat Home Page (Turquoise SuperStat)