HAURI Anti-Virus ALZ Archive Handling Remote Buffer Overflow Vulnerability
BID:15045
Info
HAURI Anti-Virus ALZ Archive Handling Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 15045 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 06 2005 12:00AM |
| Updated: | Feb 07 2006 08:55PM |
| Credit: | Discovery is credited to Tan Chew Keong with Secunia Research. |
| Vulnerable: |
Raven Software Soldier Of Fortune 2 0 Hauri ViRobot Linux Server 2.0 Hauri ViRobot Expert 4.0 Hauri LiveCall |
| Not Vulnerable: | |
Discussion
HAURI Anti-Virus ALZ Archive Handling Remote Buffer Overflow Vulnerability
HAURI Anti-Virus is affected by a remote buffer overflow vulnerability when handling ALZ archives.
An attacker can exploit this issue by crafting a malicious ALZ archive containing a compressed file with a specially crafted file name and sending this archive to a vulnerable computer.
The attacker may exploit this vulnerability to gain unauthorized remote access in the context of the superuser.
This issue is reported to affect products containing 'vrAZMain.dll' version 5.8.22.137; other versions may also be affected.
HAURI Anti-Virus is affected by a remote buffer overflow vulnerability when handling ALZ archives.
An attacker can exploit this issue by crafting a malicious ALZ archive containing a compressed file with a specially crafted file name and sending this archive to a vulnerable computer.
The attacker may exploit this vulnerability to gain unauthorized remote access in the context of the superuser.
This issue is reported to affect products containing 'vrAZMain.dll' version 5.8.22.137; other versions may also be affected.
Exploit / POC
HAURI Anti-Virus ALZ Archive Handling Remote Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
HAURI Anti-Virus ALZ Archive Handling Remote Buffer Overflow Vulnerability
Solution:
The reporter of this issue reports that the vendor has released patches to address this issue. Users running ViRobot Expert 4.0 and ViRobot Advanced Server can upgrade to vrAZMain.dll version 5.9.22.154 through the online update functionality of the application. HAURI LiveCall users can upgrade to vrAZMain.dll version 5.9.22.154 through the LiveCall Website. This has not been verified by Symantec.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Hauri ViRobot Linux Server 2.0
Solution:
The reporter of this issue reports that the vendor has released patches to address this issue. Users running ViRobot Expert 4.0 and ViRobot Advanced Server can upgrade to vrAZMain.dll version 5.9.22.154 through the online update functionality of the application. HAURI LiveCall users can upgrade to vrAZMain.dll version 5.9.22.154 through the LiveCall Website. This has not been verified by Symantec.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Hauri ViRobot Linux Server 2.0
-
Hauri ViRobot Unix/Linux Server Security Vulnerability Patch
http://www.globalhauri.com/html/download/down_unixpatch.html
References
HAURI Anti-Virus ALZ Archive Handling Remote Buffer Overflow Vulnerability
References:
References: