Raytheon SilentRunner Knowledge Browser Buffer Overflow Vulnerability
BID:3151
Info
Raytheon SilentRunner Knowledge Browser Buffer Overflow Vulnerability
| Bugtraq ID: | 3151 |
| Class: | Unknown |
| CVE: |
CVE-2001-0636 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 06 2001 12:00AM |
| Updated: | Jul 11 2009 07:56AM |
| Credit: | Discovered by John Ventura of ISS. |
| Vulnerable: |
Raytheon SilentRunner 2.0.1 Raytheon SilentRunner 2.0 |
| Not Vulnerable: | |
Discussion
Raytheon SilentRunner Knowledge Browser Buffer Overflow Vulnerability
SilentRunner is a network traffic monitoring tool offered by Raytheon.
The traffic analysis component of SilentRunner is called 'Knowledge Browser'. Knowledge Browser contains a buffer overflow vulnerability in it's processing of HTTP requests. Certain oversized requests can trigger the overflow condition when a user invokes Knowledge Browser.
This vulnerability may be exploited by remote attackers to crash or execute arbitrary code on hosts running Knowledge Browser.
SilentRunner is a network traffic monitoring tool offered by Raytheon.
The traffic analysis component of SilentRunner is called 'Knowledge Browser'. Knowledge Browser contains a buffer overflow vulnerability in it's processing of HTTP requests. Certain oversized requests can trigger the overflow condition when a user invokes Knowledge Browser.
This vulnerability may be exploited by remote attackers to crash or execute arbitrary code on hosts running Knowledge Browser.
Exploit / POC
Raytheon SilentRunner Knowledge Browser Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Raytheon SilentRunner Knowledge Browser Buffer Overflow Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.