CORE FORCE Firewall and Registry Modules Multiple Local Kernel Buffer Overflow Vulnerabilities

Bugtraq ID:	27341
Class:	Access Validation Error
CVE:	CVE-2008-0365
Remote:	No
Local:	Yes
Published:	Jan 17 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	Sebastian Gottschalk discovered these vulnerabilities.
Vulnerable:	Core Security Technologies CORE FORCE 0.95.167
Not Vulnerable:	Core Security Technologies CORE FORCE 0.95.172

CORE FORCE Firewall and Registry Modules Multiple Local Kernel Buffer Overflow Vulnerabilities

CORE FORCE Firewall and Registry modules are prone to multiple local kernel buffer-overflow vulnerabilities because the software fails to adequately verify user-supplied input.

Local attackers can exploit these issues to cause denial-of-service conditions. Attackers may also be able to escalate privileges and execute arbitrary code, but this has not been confirmed.

These issues affect versions up to and including CORE FORCE 0.95.167.

CORE FORCE Firewall and Registry Modules Multiple Local Kernel Buffer Overflow Vulnerabilities

The following steps to reproduce an exploit are available:

• /data/vulnerabilities/exploits/27341.txt

CORE FORCE Firewall and Registry Modules Multiple Local Kernel Buffer Overflow Vulnerabilities

Solution:
The vendor has released an advisory and updates to address these issues. Please see the references for more information.

CORE FORCE Firewall and Registry Modules Multiple Local Kernel Buffer Overflow Vulnerabilities

References:

• CORE FORCE Homepage (CORE Security Technologies)
  
• CORE-2007-1119: CORE FORCE Kernel Buffer Overflow (CORE Security Technologies Advisories )