McAfee E-Business Server Authentication Packet Handling Integer Overflow Vulnerability

Bugtraq ID:	26269
Class:	Boundary Condition Error
CVE:	CVE-2007-2957
Remote:	Yes
Local:	No
Published:	Oct 31 2007 12:00AM
Updated:	Oct 31 2007 07:36PM
Credit:	Dyon Balding is credited with the discovery of this issue.
Vulnerable:	McAfee E-Business Server 8.5.2 McAfee E-Business Server 8.1.1
Not Vulnerable:	McAfee E-Business Server 8.5.3 McAfee E-Business Server 8.1.2

McAfee E-Business Server Authentication Packet Handling Integer Overflow Vulnerability

The application is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun.

Successfully exploiting this issue may allow attackers to execute arbitrary code within the context of the affected application. This is turn may result in a complete compromise of the affected system. Failed exploit attempts will result in a denial of service.

The issue affects McAfee E-Business Server 8.1.1 for Linux and 8.5.2 for Solaris. Versions for Windows are not affected.

McAfee E-Business Server Authentication Packet Handling Integer Overflow Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

McAfee E-Business Server Authentication Packet Handling Integer Overflow Vulnerability

Solution:
The vendor has released fixes to address this issue. Please see the references for more information.

McAfee E-Business Server Authentication Packet Handling Integer Overflow Vulnerability

References:

• McAfee E-Business Server Homepage (McAfee)
  
• McAfee Homepage (McAfee)
  
• Secunia Research: McAfee E-Business Server Auth Packet Handling Buffer Overflow (Secunia)