Wyse Thin Client 'hagent.exe' Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	35650
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 10 2009 12:00AM
Updated:	Jul 16 2009 10:46PM
Credit:	Kevin Finisterre
Vulnerable:	Wyse Thin Client 0
Not Vulnerable:

Wyse Thin Client 'hagent.exe' Unspecified Buffer Overflow Vulnerability

Wyse Thin Client is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data before copying it to insufficiently sized buffers.

Exploiting this issue will allow an attacker to execute arbitrary code in the context of the application, corrupt memory, or cause denial-of-service conditions.

We don't know which versions of Wyse Thin Client are affected. We will update this BID as more information emerges.

Wyse Thin Client 'hagent.exe' Unspecified Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NOTE: The reporter indicates that proof-of-concept code exists, but has not been publicly released.

Wyse Thin Client 'hagent.exe' Unspecified Buffer Overflow Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.


Wyse Thin Client 0

• Wyse WSB09-01.zip
  

Wyse Thin Client 'hagent.exe' Unspecified Buffer Overflow Vulnerability

References:

• 'Secure' Wyse thin clients vulnerable to remote exploit bugs (Dan Goodin)
  
• Vendor Homepage (Wyse)
  
• Security WSB09-01 Update available for Wyse Device Manager (Wyse)