RhinoSoft Serv-U Web Client HTTP Request Remote Buffer Overflow Vulnerability

Bugtraq ID:	36895
Class:	Boundary Condition Error
CVE:	CVE-2009-4873
Remote:	Yes
Local:	No
Published:	Nov 01 2009 12:00AM
Updated:	Apr 13 2015 09:06PM
Credit:	Nikolaos Rangos of KC Security
Vulnerable:	Rhino Software Serv-U Web Client 9.0.0.5
Not Vulnerable:	Rhino Software Serv-U Web Client 9.1 .0

RhinoSoft Serv-U Web Client HTTP Request Remote Buffer Overflow Vulnerability

RhinoSoft Serv-U Web Client is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Serv-U Web Client 9.0.0.5 is vulnerable; other versions prior to Serv-U Web Client 9.1.0.0 may also be affected.

RhinoSoft Serv-U Web Client HTTP Request Remote Buffer Overflow Vulnerability

The following proof of concept and exploit are available:

• /data/vulnerabilities/exploits/36895.pl
• /data/vulnerabilities/exploits/36895.cpp

RhinoSoft Serv-U Web Client HTTP Request Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for details.

RhinoSoft Serv-U Web Client HTTP Request Remote Buffer Overflow Vulnerability

References:

• RhinoSoft.com Serv-U 9.0.0.5 WebClient Remote Buffer Overflow (KC Security)
  
• Serv-U Release Notes (RhinoSoft)
  
• Serv-U Web Client Homepage (Rhino Software)