Unisys Business Information Server Remote Stack Buffer Overflow Vulnerability
BID:35494
Info
Unisys Business Information Server Remote Stack Buffer Overflow Vulnerability
| Bugtraq ID: | 35494 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-1628 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 25 2009 12:00AM |
| Updated: | Aug 21 2009 03:55PM |
| Credit: | FistFuXXer working with iDefense VCP |
| Vulnerable: |
Unisys Business Information Server 10.1 Unisys Business Information Server 10 |
| Not Vulnerable: | |
Discussion
Unisys Business Information Server Remote Stack Buffer Overflow Vulnerability
Unisys Business Information Server (formerly known as MAPPER) is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.
An attacker can exploit this issue to execute arbitrary code within the context of an affected server, possibly with SYSTEM-level privileges. Failed exploit attempts will result in denial-of-service conditions.
Business Information Server 10 and 10.1 are vulnerable; other versions may also be affected.
Unisys Business Information Server (formerly known as MAPPER) is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.
An attacker can exploit this issue to execute arbitrary code within the context of an affected server, possibly with SYSTEM-level privileges. Failed exploit attempts will result in denial-of-service conditions.
Business Information Server 10 and 10.1 are vulnerable; other versions may also be affected.
Exploit / POC
Unisys Business Information Server Remote Stack Buffer Overflow Vulnerability
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Unisys Business Information Server Remote Stack Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for details.
Unisys Business Information Server 10.1
Solution:
Updates are available. Please see the references for details.
Unisys Business Information Server 10.1
-
Unisys BIS101E6Bx32.zip
for 32 bit BIS installations
ftp://ftp.support.unisys.com/pub/mapper/NT/BIS10.1/x32/BIS101E6Bx32.zi p -
Unisys BIS101E6Bx64.zip
for 64 bit BIS installations
ftp://ftp.support.unisys.com/pub/mapper/NT/BIS10.1/x64/BIS101E6Bx64.zi p
References
Unisys Business Information Server Remote Stack Buffer Overflow Vulnerability
References:
References:
- Business Information Server Homepage (Unisys)
- Readme.txt (Unisys)
- Unisys Business Information Server Stack Buffer Overflow (iDefense Labs)
- iDefense Security Advisory 06.25.09: Unisys Business Information Server Stack Bu (iDefense Labs