Red Hat Directory Server / Certificate Server Management Console Buffer Overflow Vulnerability
BID:16345
Info
Red Hat Directory Server / Certificate Server Management Console Buffer Overflow Vulnerability
| Bugtraq ID: | 16345 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jan 23 2006 12:00AM |
| Updated: | Feb 07 2006 08:55PM |
| Credit: | Discovered by Peter Winter-Smith of NGSSoftware. |
| Vulnerable: |
Redhat Directory Server 7.1 Redhat Certificate Server 7.1 Netscape Directory Server 6.21 Netscape Directory Server 6.11 Netscape Directory Server 6.2 Netscape Directory Server 6.1 Netscape Directory Server 6.0 2 Netscape Directory Server 6.0 1 Netscape Directory Server 6.0 Netscape Directory Server 4.13 Netscape Directory Server 4.12 Netscape Directory Server 4.11 Netscape Directory Server 4.1 Netscape Directory Server 3.12 Netscape Directory Server 3.1 P1 Netscape Directory Server 1.3 P5 |
| Not Vulnerable: |
Redhat Directory Server 7.1 SP1 |
Discussion
Red Hat Directory Server / Certificate Server Management Console Buffer Overflow Vulnerability
Red Hat Directory Server and Certificate Server are prone to a buffer-overflow vulnerability.
This issue affects the Admin pages of the Management Console.
Reports indicate that this issue can be exploited remotely to execute arbitrary code under some circumstances; local attackers may be able to gain superuser privileges by executing arbitrary code.
A successful attack may lead to a complete compromise.
Red Hat Directory Server and Certificate Server are prone to a buffer-overflow vulnerability.
This issue affects the Admin pages of the Management Console.
Reports indicate that this issue can be exploited remotely to execute arbitrary code under some circumstances; local attackers may be able to gain superuser privileges by executing arbitrary code.
A successful attack may lead to a complete compromise.
Exploit / POC
Red Hat Directory Server / Certificate Server Management Console Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Red Hat Directory Server / Certificate Server Management Console Buffer Overflow Vulnerability
Solution:
Red Hat has released Directory Server 7.1 SP1 to address this issue. A fixed version of Certificate Server will be available in the near future as well. Please contact the vendor to obtain fixes.
Solution:
Red Hat has released Directory Server 7.1 SP1 to address this issue. A fixed version of Certificate Server will be available in the near future as well. Please contact the vendor to obtain fixes.
References
Red Hat Directory Server / Certificate Server Management Console Buffer Overflow Vulnerability
References:
References:
- Red Hat Directory Server 7.1 SP1 Release Notes (RedHat)
- Red Hat Directory Server Product Page (RedHat)
- High Risk Vulnerability in Red Hat Directory Server and Red Hat Certificate Serv ("NGSSoftware Insight Security Research"