Addonics NAS Adapter 'bts.cgi' Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	34607
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 20 2009 12:00AM
Updated:	Apr 22 2009 05:26PM
Credit:	Mike Cyr, aka h00die
Vulnerable:	Addonics NAS Adapter NASU2FW41
Not Vulnerable:

Addonics NAS Adapter 'bts.cgi' Multiple Buffer Overflow Vulnerabilities

Addonics NAS Adaptor is prone to multiple buffer-overflow vulnerabilities because the device fails to perform adequate boundary checks on user-supplied input. Note that to leverage these issues, an attacker must authenticate with the affected device.

Attackers may leverage these issues to execute arbitrary code in the context of the webserver. Failed attacks will cause denial-of-service conditions.

The following firmware version is vulnerable:

NASU2FW41 (Loader 1.17)

Addonics NAS Adapter 'bts.cgi' Multiple Buffer Overflow Vulnerabilities

The following proof of concept is available:

• /data/vulnerabilities/exploits/34607.sh

Addonics NAS Adapter 'bts.cgi' Multiple Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Addonics NAS Adapter 'bts.cgi' Multiple Buffer Overflow Vulnerabilities

References:

• NAS Adapter Homepage (Addonics)
  
• Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth) ([email protected])