Wyse Device Manager Unspecified Remote Buffer Overflow Vulnerability

Bugtraq ID:	35649
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 10 2009 12:00AM
Updated:	Jul 16 2009 10:36PM
Credit:	Kevin Finisterre
Vulnerable:	Wyse Wyse Device Manager Workgroup Edition 4.7.2 Wyse Wyse Device Manager Workgroup Edition 4.7 Wyse Wyse Device Manager Enterprise Edition 4.7.2 Wyse Wyse Device Manager Enterprise Edition 4.7
Not Vulnerable:

Wyse Device Manager Unspecified Remote Buffer Overflow Vulnerability

Wyse Device Manager is prone to a remote buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Wyse Device Manager Unspecified Remote Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Wyse Device Manager Unspecified Remote Buffer Overflow Vulnerability

Solution:
The vendor released an advisory and fixes. Please see the references for details.


Wyse Wyse Device Manager Enterprise Edition 4.7

• Wyse WSB09-01.zip
  

Wyse Wyse Device Manager Workgroup Edition 4.7

• Wyse WSB09-01.zip
  

Wyse Wyse Device Manager Workgroup Edition 4.7.2

• Wyse WSB09-01.zip
  

Wyse Wyse Device Manager Enterprise Edition 4.7.2

• Wyse WSB09-01.zip
  

Wyse Device Manager Unspecified Remote Buffer Overflow Vulnerability

References:

• 'Secure' Wyse thin clients vulnerable to remote exploit bugs (Dan Goodin)
  
• Wyse Device Manager Homepage (Wyse)
  
• Security WSB09-01 Update available for Wyse Device Manager (Wyse)