NetSQL Remote Buffer Overflow Vulnerability
BID:2885
Info
NetSQL Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 2885 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2001-1163 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 15 2001 12:00AM |
| Updated: | Jul 11 2009 06:56AM |
| Credit: | This vulnerability was announced in an exploit sent to the Securityfocus Vulnerability Analysis Team by Papa-tudo <[email protected]> on June 15, 2001. |
| Vulnerable: |
Munica NetSQL 1.0 |
| Not Vulnerable: | |
Discussion
NetSQL Remote Buffer Overflow Vulnerability
NetSQL is an implementation of a database and toolset distributed by Munica Corporation. NetSQL is part of 5 piece software package called the Webpak, containing utilities for features such as web boards, membership, and online calendars.
A buffer overflow in the server makes it possible for a remote user to gain remote root access to a system using the affected software. By sending a long string to port 6500, a remote user can create a buffer overflow, allowing code execution.
This makes it possible for a remote user to gain remote root access, resulting in complete compromise of a system using the affected software.
NetSQL is an implementation of a database and toolset distributed by Munica Corporation. NetSQL is part of 5 piece software package called the Webpak, containing utilities for features such as web boards, membership, and online calendars.
A buffer overflow in the server makes it possible for a remote user to gain remote root access to a system using the affected software. By sending a long string to port 6500, a remote user can create a buffer overflow, allowing code execution.
This makes it possible for a remote user to gain remote root access, resulting in complete compromise of a system using the affected software.
Exploit / POC
NetSQL Remote Buffer Overflow Vulnerability
Exploit contributed by Papa-tudo <[email protected]>.
Exploit contributed by Papa-tudo <[email protected]>.
Solution / Fix
NetSQL Remote Buffer Overflow Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
NetSQL Remote Buffer Overflow Vulnerability
References:
References: