EZNE.NET Ezboard 2000 Remote Buffer Overflow Vulnerability
BID:4068
Info
EZNE.NET Ezboard 2000 Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 4068 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2002-0263 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 11 2002 12:00AM |
| Updated: | Jul 11 2009 10:56AM |
| Credit: | Discovered by Jin Ho You <[email protected]> |
| Vulnerable: |
EZNE.net ezboard 1.27 |
| Not Vulnerable: | |
Discussion
EZNE.NET Ezboard 2000 Remote Buffer Overflow Vulnerability
Ezboard 2000 is a web based bulletin board system. It is available for Linux systems.
A vulnerability has been reported in some versions of Ezboard. In some CGI programs, user supplied data is written to a staticly sized array with a sprintf call. Large amounts of user supplied data may overflow this array and overwrite adjacent areas of stack memory. If return pointers are overwritten, arbitrary code may be executed as the vulnerable process.
It has been reported that the scripts ezboard.cgi, ezman.cgi and ezadmin.cgi suffer from this vulnerability.
Ezboard 2000 is a web based bulletin board system. It is available for Linux systems.
A vulnerability has been reported in some versions of Ezboard. In some CGI programs, user supplied data is written to a staticly sized array with a sprintf call. Large amounts of user supplied data may overflow this array and overwrite adjacent areas of stack memory. If return pointers are overwritten, arbitrary code may be executed as the vulnerable process.
It has been reported that the scripts ezboard.cgi, ezman.cgi and ezadmin.cgi suffer from this vulnerability.
Solution / Fix
EZNE.NET Ezboard 2000 Remote Buffer Overflow Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
A third party patch has been provided by Jin Ho You <[email protected]>:
EZNE.net ezboard 1.27
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
A third party patch has been provided by Jin Ho You <[email protected]>:
EZNE.net ezboard 1.27
-
Jin Ho You
/data/vulnerabilities/patches/ezboard-fix.pl