Feng Multiple Remote Buffer Overflow and Denial of Service Vulnerabilities

Bugtraq ID:	27049
Class:	Unknown
CVE:	CVE-2007-6627 CVE-2007-6628 CVE-2007-6629 CVE-2007-6630 CVE-2007-6626
Remote:	Yes
Local:	No
Published:	Dec 27 2007 12:00AM
Updated:	Jul 06 2016 02:17PM
Credit:	Luigi Auriemma discovered these vulnerabilities.
Vulnerable:	Netembryo Netembryo 0.0.4 Feng Feng 0.1.15
Not Vulnerable:

Feng Multiple Remote Buffer Overflow and Denial of Service Vulnerabilities

Feng is prone to multiple remote buffer-overflow and denial-of-service vulnerabilities.

Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the server application. Attackers may also crash the application, denying service to legitimate users.

Feng 0.1.15 is vulnerable to these issues; other versions may also be affected.

Feng Multiple Remote Buffer Overflow and Denial of Service Vulnerabilities

The following proof-of-concept code is available:

• /data/vulnerabilities/exploits/fengulo.zip

Feng Multiple Remote Buffer Overflow and Denial of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Feng Multiple Remote Buffer Overflow and Denial of Service Vulnerabilities

References:

• Feng Home Page (Feng)
  
• Netembryo Product Page (Netembryo )
  
• Multiple vulnerabilities in Feng 0.1.15 (Luigi Auriemma )