SocksCap Hostname Resolution Remote Stack Based Buffer Overflow Vulnerability
BID:27357
Info
SocksCap Hostname Resolution Remote Stack Based Buffer Overflow Vulnerability
| Bugtraq ID: | 27357 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-0378 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 18 2008 12:00AM |
| Updated: | May 07 2015 05:33PM |
| Credit: | azizov <[email protected]> is credited with the discovery of this issue. |
| Vulnerable: |
NEC SocksCap 2.40-051231 |
| Not Vulnerable: | |
Discussion
SocksCap Hostname Resolution Remote Stack Based Buffer Overflow Vulnerability
SocksCap is prone to a remote stack-based buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Successful exploits allow remote attackers to execute arbitrary machine code in the context of the vulnerable application. Failed exploit attempts likely result in denial-of-service conditions.
SocksCap 2.40-051231 is vulnerable; other versions may also be affected.
SocksCap is prone to a remote stack-based buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Successful exploits allow remote attackers to execute arbitrary machine code in the context of the vulnerable application. Failed exploit attempts likely result in denial-of-service conditions.
SocksCap 2.40-051231 is vulnerable; other versions may also be affected.
Exploit / POC
SocksCap Hostname Resolution Remote Stack Based Buffer Overflow Vulnerability
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
SocksCap Hostname Resolution Remote Stack Based Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
SocksCap Hostname Resolution Remote Stack Based Buffer Overflow Vulnerability
References:
References: