Blue Coat Systems WinProxy Remote Host Header Buffer Overflow Vulnerability
BID:16147
Info
Blue Coat Systems WinProxy Remote Host Header Buffer Overflow Vulnerability
| Bugtraq ID: | 16147 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2005-4085 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 05 2006 12:00AM |
| Updated: | Nov 15 2007 12:37AM |
| Credit: | FistFuXXer discovered this vulnerability. |
| Vulnerable: |
Blue Coat Systems WebProxy 6.0 Blue Coat Systems ProxyAV |
| Not Vulnerable: |
Blue Coat Systems WebProxy 6.1 a Blue Coat Systems ProxyAV 2.4.2 |
Discussion
Blue Coat Systems WinProxy Remote Host Header Buffer Overflow Vulnerability
A remote buffer-overflow vulnerability affects Blue Coat Systems WinProxy because the application fails to properly validate the length of user-supplied strings before copying them into static process buffers.
An attacker may exploit this issue to execute arbitrary code with the privileges of the vulnerable application. This may facilitate unauthorized access or privilege escalation.
Blue Coat Systems WinProxy 6.0 is vulnerable to this issue; other versions may also be affected.
Blue Coat Systems ProxyAV is also affected by this issue.
A remote buffer-overflow vulnerability affects Blue Coat Systems WinProxy because the application fails to properly validate the length of user-supplied strings before copying them into static process buffers.
An attacker may exploit this issue to execute arbitrary code with the privileges of the vulnerable application. This may facilitate unauthorized access or privilege escalation.
Blue Coat Systems WinProxy 6.0 is vulnerable to this issue; other versions may also be affected.
Blue Coat Systems ProxyAV is also affected by this issue.
Exploit / POC
Blue Coat Systems WinProxy Remote Host Header Buffer Overflow Vulnerability
UPDATE: Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The 'CAN-2005-4085_exploit.pl' exploit is provided by FistFucker <[email protected]>.
The 'bluecoat_winproxy.pm' Metasploit Framework exploit is provided by y0 <[email protected]>.
UPDATE: Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The 'CAN-2005-4085_exploit.pl' exploit is provided by FistFucker <[email protected]>.
The 'bluecoat_winproxy.pm' Metasploit Framework exploit is provided by y0 <[email protected]>.
Solution / Fix
Blue Coat Systems WinProxy Remote Host Header Buffer Overflow Vulnerability
Solution:
The vendor has released WinProxy 6.1a and ProxyAV 2.4.2.3 to address this and other issues.
Blue Coat Systems WebProxy 6.0
Solution:
The vendor has released WinProxy 6.1a and ProxyAV 2.4.2.3 to address this and other issues.
Blue Coat Systems WebProxy 6.0
-
Blue Coat Systems WinProxy 6.1a
http://download.winproxy.com/downloads/WinProxy.exe
References
Blue Coat Systems WinProxy Remote Host Header Buffer Overflow Vulnerability
References:
References:
- Host Header Stack Overflow Vulnerability (Blue Coat Systems)
- WinProxy Home Page (Blue Coat Systems)
- WinProxy: Release Notes (Blue Coat Systems)
- iDefense Security Advisory 01.05.06: Blue Coat Systems WinProxy Host Header Stac ("[email protected]"