BigAnt IM Server HTTP GET Request Buffer Overflow Vulnerability
BID:36407
Info
BigAnt IM Server HTTP GET Request Buffer Overflow Vulnerability
| Bugtraq ID: | 36407 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-4660 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 15 2009 12:00AM |
| Updated: | Apr 13 2015 09:06PM |
| Credit: | Blake |
| Vulnerable: |
HUATU SOFTWARE BigAnt IM Server 2.50 |
| Not Vulnerable: | |
Discussion
BigAnt IM Server HTTP GET Request Buffer Overflow Vulnerability
BigAnt IM Server is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.
An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the server. Failed exploit attempts will result in a denial-of-service condition.
BigAnt IM Server 2.50 is vulnerable; other versions may also be affected.
NOTE: This issue may be related to the vulnerability described in BID 28795 (BigAnt IM Server HTTP GET Request Remote Buffer Overflow Vulnerability). We will update or retire this BID if further analysis or reports reveal that the two records represent the same vulnerability.
BigAnt IM Server is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.
An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the server. Failed exploit attempts will result in a denial-of-service condition.
BigAnt IM Server 2.50 is vulnerable; other versions may also be affected.
NOTE: This issue may be related to the vulnerability described in BID 28795 (BigAnt IM Server HTTP GET Request Remote Buffer Overflow Vulnerability). We will update or retire this BID if further analysis or reports reveal that the two records represent the same vulnerability.
Exploit / POC
BigAnt IM Server HTTP GET Request Buffer Overflow Vulnerability
The following exploits are available:
The following exploits are available:
Solution / Fix
BigAnt IM Server HTTP GET Request Buffer Overflow Vulnerability
Solution:
Updates are available. Please contact the vendor for details.
HUATU SOFTWARE BigAnt IM Server 2.50
Solution:
Updates are available. Please contact the vendor for details.
HUATU SOFTWARE BigAnt IM Server 2.50
-
HUATU SOFTWARE BigAntServer_Enu_Setup0917patch.exe
http://www.bigantsoft.com/software/BigAntServer_Enu_Setup0917patch.exe
References
BigAnt IM Server HTTP GET Request Buffer Overflow Vulnerability
References:
References:
- Vendor Homepage (HUATU SOFTWARE)