Zeus Web Server 'SSL2_CLIENT_HELLO' Remote Buffer Overflow Vulnerability

Bugtraq ID:	37829
Class:	Boundary Condition Error
CVE:	CVE-2010-0359
Remote:	Yes
Local:	No
Published:	Jan 15 2010 12:00AM
Updated:	Apr 13 2015 09:03PM
Credit:	Intevydis
Vulnerable:	Zeus Technologies Zeus Web Server 4.2 r2 Zeus Technologies Zeus Web Server 4.2 Zeus Technologies Zeus Web Server 4.1 r5 Zeus Technologies Zeus Web Server 4.1 r4 Zeus Technologies Zeus Web Server 4.1 r3 Zeus Technologies Zeus Web Server 4.1 r2 Zeus Technologies Zeus Web Server 4.1 r1 Zeus Technologies Zeus Web Server 4.1 Zeus Technologies Zeus Web Server 4.0 Zeus Technologies Zeus Web Server 4.3r4
Not Vulnerable:	Zeus Technologies Zeus Web Server 4.3r5

Zeus Web Server 'SSL2_CLIENT_HELLO' Remote Buffer Overflow Vulnerability

Zeus Web Server is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Versions prior to Zeus Web Server 4.3r5 are vulnerable.

Zeus Web Server 'SSL2_CLIENT_HELLO' Remote Buffer Overflow Vulnerability

A working commercial exploit is available through Intevydis.

The following proof of concept is available:

• /data/vulnerabilities/exploits/37829.py

Zeus Web Server 'SSL2_CLIENT_HELLO' Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for details.

Zeus Web Server 'SSL2_CLIENT_HELLO' Remote Buffer Overflow Vulnerability

References:

• VulnDisco Pack Professional 8.12 (Sun)
  
• Zeus Technology Homepage (Zeus Technology)
  
• Zeus Web Server 4.3 Release Notes (Zeus Technologies)
  
• Zeus Web Server SSL2_CLIENT_HELLO overflow (Evgeny Legerov)