PeerCast 'getAuthUserPass' Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	28986
Class:	Boundary Condition Error
CVE:	CVE-2008-2040
Remote:	Yes
Local:	No
Published:	Apr 29 2008 12:00AM
Updated:	Jul 21 2008 10:08PM
Credit:	Nico Golde
Vulnerable:	peercast.org PeerCast 0.1218 GNOME PeerCast 0.5.4 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:

PeerCast 'getAuthUserPass' Multiple Buffer Overflow Vulnerabilities

PeerCast is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer.

Successfully exploiting these issues will allow an attacker to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will likely crash the application.

These issues affect PeerCast 0.1218; other versions may also be affected.

PeerCast 'getAuthUserPass' Multiple Buffer Overflow Vulnerabilities

The following proof of concept is available:

• /data/vulnerabilities/exploits/28986.py

PeerCast 'getAuthUserPass' Multiple Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

PeerCast 'getAuthUserPass' Multiple Buffer Overflow Vulnerabilities

References:

• Debian Bug report logs - #478680 (Debian)
  
• GNOME PeerCast Project Page (GNOME)
  
• PeerCast Homepage (peercast.org)
  
• stack-based buffer overflow in HTTP::getAuthUserPass function (Nico Golde)