BomberClone Error Messages Buffer Overflow Vulnerability

Bugtraq ID:	16697
Class:	Boundary Condition Error
CVE:	CVE-2006-0460
Remote:	Yes
Local:	No
Published:	Feb 16 2006 12:00AM
Updated:	Apr 17 2006 06:21PM
Credit:	Discovery is credited to Stefan Cornelius.
Vulnerable:	Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 BomberClone BomberClone 0.11.6.2 BomberClone BomberClone 0.11.6.1
Not Vulnerable:

BomberClone Error Messages Buffer Overflow Vulnerability


BomberClone is prone to a buffer-overflow vulnerability. This issue is due to a failure in the application to perform proper boundary checks on user-supplied data before storing it in a finite sized buffer.

This issue may be exploited to execute arbitrary code in the context of the user who is running the application.

Version 0.11.6.2 is vulnerable; other versions may also be affected.

BomberClone Error Messages Buffer Overflow Vulnerability


Exploit code is available.

• /data/vulnerabilities/exploits/bomberclone_exp.c
• /data/vulnerabilities/exploits/bomberclone_overflow_win32.pm

BomberClone Error Messages Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Please see the referenced vendor advisories for further information.

BomberClone Error Messages Buffer Overflow Vulnerability

References:

• BomberClone Web Site (BomberClone)