DSocks Name Variable Buffer Overflow Vulnerability

Bugtraq ID:	19852
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 05 2006 12:00AM
Updated:	Sep 07 2006 03:23PM
Credit:	Michael Adams is credited with discovering this vulnerability.
Vulnerable:	Dsocks Dsocks 1.3
Not Vulnerable:

DSocks Name Variable Buffer Overflow Vulnerability

Dsocks is prone to a remote buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

An attacker may exploit this vulnerability to execute arbitrary code in the context of the user running the application or to crash the application, resulting in denial-of-service conditions.

DSocks Name Variable Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

The following proof-of-concept URI is available:

• /data/vulnerabilities/exploits/dsocks-sept5-2006.html

DSocks Name Variable Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

DSocks Name Variable Buffer Overflow Vulnerability

References:

• Dsocks Homepage (dugsong)
  
• Buffer overflow vulnerability in dsocks ( Michael Adams)