Orb Networks Orb RPC Request Remote Integer Overflow Vulnerability

Bugtraq ID:	28431
Class:	Boundary Condition Error
CVE:	CVE-2008-0070
Remote:	Yes
Local:	No
Published:	Mar 25 2008 12:00AM
Updated:	Mar 26 2008 03:29PM
Credit:	Dyon Balding, Secunia Research
Vulnerable:	Orb Networks Orb 2.0.1014 + NullSoft Winamp Remote BETA 0
Not Vulnerable:	Orb Networks Orb 2.0.1084 + NullSoft Winamp Remote BETA 2.0.1024

Orb Networks Orb RPC Request Remote Integer Overflow Vulnerability

Orb is prone to a remote integer-overflow vulnerability.

A remote attacker may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely crash the application, denying service to legitimate users.

The issue affects Orb 2.00.1014; other versions may also be vulnerable.

Orb Networks Orb RPC Request Remote Integer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Orb Networks Orb RPC Request Remote Integer Overflow Vulnerability

Solution:
Reportedly this issue has been fixed in Orb 2.00.1084, but this has not been confirmed. Please see the references and contact the vendor for more information.

Orb Networks Orb RPC Request Remote Integer Overflow Vulnerability

References:

• Orb Homepage (Orb Networks)
  
• Orb Networks Orb Variant Array Parsing Buffer Overflow (Secunia Research)