Phusion Webserver Long URL Buffer Overflow Vulnerability

Bugtraq ID:	4119
Class:	Boundary Condition Error
CVE:	CVE-2002-0289
Remote:	Yes
Local:	No
Published:	Feb 16 2002 12:00AM
Updated:	Jul 11 2009 10:56AM
Credit:	This issue was submitted to BugTraq on February 16th, 2002 by Alex Hernandez <[email protected]>.
Vulnerable:	BBShareware.Com Phusion Webserver 1.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0
Not Vulnerable:

Phusion Webserver Long URL Buffer Overflow Vulnerability

Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems.

Phusion Webserver does not perform sufficient bounds checking of externally supplied data. As a result, it is possible for a remote attacker to submit an excessively long web request which may cause stack variables to be overwritten with attacker-supplied instructions.

As webservers normally run with SYSTEM privileges on Microsoft Windows operating systems, this may result in a full compromise of a host running the vulnerable software.

It should be noted that this unchecked buffer may also be exploited to cause a denial of service condition.

Phusion Webserver Long URL Buffer Overflow Vulnerability

The following proof-of-concept was provided by Alex Hernandez <[email protected]>:

• /data/vulnerabilities/exploits/Phusion-ovrun.c