Multiple Vendor XFERWAN.EXE Filename Remote Buffer Overflow Vulnerability
BID:24317
Info
Multiple Vendor XFERWAN.EXE Filename Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 24317 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-2514 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 04 2007 12:00AM |
| Updated: | Jun 05 2007 08:00PM |
| Credit: | Discovered by Cody Pierce, TippingPoint DVLabs. |
| Vulnerable: |
Symantec Discovery 6.5 Numara Numara Asset Manager 8.0 Centennial UK Ltd Discovery 2006 Feature Pack 1 |
| Not Vulnerable: | |
Discussion
Multiple Vendor XFERWAN.EXE Filename Remote Buffer Overflow Vulnerability
Multiple vendor products are prone to a remote buffer-overflow vulnerability in 'XFERWAN.EXE'.
The vulnerability arises in the service when handling logging requests. Specifically, a long filename can trigger an overflow condition that will corrupt memory.
A remote attacker may trigger a denial-of-service condition or may execute arbitrary code with SYSTEM privileges. This may facilitate a complete compromise of affected systems.
The following versions contain the affected executable and are considered vulnerable:
Centennial Discovery 2006 Feature Pack 1
Symantec Discovery 6.5
Numara Asset Manager 8.0
Earlier versions of each application may be affected as well.
Multiple vendor products are prone to a remote buffer-overflow vulnerability in 'XFERWAN.EXE'.
The vulnerability arises in the service when handling logging requests. Specifically, a long filename can trigger an overflow condition that will corrupt memory.
A remote attacker may trigger a denial-of-service condition or may execute arbitrary code with SYSTEM privileges. This may facilitate a complete compromise of affected systems.
The following versions contain the affected executable and are considered vulnerable:
Centennial Discovery 2006 Feature Pack 1
Symantec Discovery 6.5
Numara Asset Manager 8.0
Earlier versions of each application may be affected as well.
Exploit / POC
Multiple Vendor XFERWAN.EXE Filename Remote Buffer Overflow Vulnerability
An exploit may have been developed by the researcher responsible for discovering this issue, but Symantec is not aware of any reports that the exploit is publicly available.
If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
An exploit may have been developed by the researcher responsible for discovering this issue, but Symantec is not aware of any reports that the exploit is publicly available.
If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution / Fix
Multiple Vendor XFERWAN.EXE Filename Remote Buffer Overflow Vulnerability
Solution:
Reports indicate that Centennial has released a patch that addresses this issue. The fix may be available in the Centennial Customer Zone support site. Please contact the vendor references for more information. Note that Symantec has not verified this information.
Solution:
Reports indicate that Centennial has released a patch that addresses this issue. The fix may be available in the Centennial Customer Zone support site. Please contact the vendor references for more information. Note that Symantec has not verified this information.
References
Multiple Vendor XFERWAN.EXE Filename Remote Buffer Overflow Vulnerability
References:
References: