RETIRED: Symantec Norton Ghost RemoteCommand.DLL Buffer Overflow Vulnerability
BID:24825
Info
RETIRED: Symantec Norton Ghost RemoteCommand.DLL Buffer Overflow Vulnerability
| Bugtraq ID: | 24825 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-3666 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 09 2007 12:00AM |
| Updated: | May 12 2015 07:49PM |
| Credit: | Michal Bucko is credited with the discovery of this vulnerability. |
| Vulnerable: |
Symantec Norton Ghost 12.0 |
| Not Vulnerable: | |
Discussion
RETIRED: Symantec Norton Ghost RemoteCommand.DLL Buffer Overflow Vulnerability
Symantec Norton Ghost is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
This issue affects Symantec Ghost 12.0; other versions may also be affected.
NOTE: This issue is being retired. Further investigation reveals that exploiting this bug requires authenticated access and that any code execution or denial of service would be in the context of the authenticated user (i.e. there is no gain for the attacker and any service disruption would affect only the attacker).
Symantec Norton Ghost is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
This issue affects Symantec Ghost 12.0; other versions may also be affected.
NOTE: This issue is being retired. Further investigation reveals that exploiting this bug requires authenticated access and that any code execution or denial of service would be in the context of the authenticated user (i.e. there is no gain for the attacker and any service disruption would affect only the attacker).
Exploit / POC
RETIRED: Symantec Norton Ghost RemoteCommand.DLL Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RETIRED: Symantec Norton Ghost RemoteCommand.DLL Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RETIRED: Symantec Norton Ghost RemoteCommand.DLL Buffer Overflow Vulnerability
References:
References:
- Symantec Homepage (Symantec)
- [Eleytt] 7LIPIEC2007 ([email protected])