Liero Xtreme Remote Format String Vulnerability

Bugtraq ID:	16990
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 06 2006 12:00AM
Updated:	Mar 06 2006 12:00AM
Credit:	Discovery is credited to Luigi Auriemma.
Vulnerable:	Liero Xtreme 0.62b Liero Xtreme 0.62a
Not Vulnerable:

Liero Xtreme Remote Format String Vulnerability


Liero Xtreme is reported prone to a remote format string vulnerability.


It is possible that as a result of this issue, malicious data containing format specifiers will be interpreted literally by the application; this may result in attacker-specified memory being corrupted or disclosed, leading to arbitrary code execution.

A successful exploit could result in a failure of the application or arbitrary code execution in the context of the application.

Liero Xtreme Remote Format String Vulnerability

No exploit is required.

A proof of concept example is available:

• http://www.securityfocus.com/vulnerabilities/exploits/lieroxxx.zip

Liero Xtreme Remote Format String Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] mailto:[email protected]:[email protected].

Liero Xtreme Remote Format String Vulnerability

References:

• Liero Xtreme Web Site (Liero Xtreme)
  
• Multiple vulnerabilities in Liero Xtreme 0.62b (Luigi Auriemma )