EDItran Communications Platform (editcp) Remote Buffer Overflow Vulnerability

Bugtraq ID:	41342
Class:	Boundary Condition Error
CVE:	CVE-2010-5288
Remote:	Yes
Local:	No
Published:	Jul 05 2010 12:00AM
Updated:	Jul 03 2013 12:31PM
Credit:	Pedro Andujar
Vulnerable:	EDItran Communications Platform (editcp) 4.1 R7
Not Vulnerable:

EDItran Communications Platform (editcp) Remote Buffer Overflow Vulnerability

EDItran Communications Platform (editcp) is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input before copying it into a fixed-length buffer.

Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.

editcp 4.1 R7 is vulnerable; other versions may also be affected.

EDItran Communications Platform (editcp) Remote Buffer Overflow Vulnerability

The following proof-of-concept is available:

$ perl -e '{print "A"x100}' | nc www.example.com:7777

EDItran Communications Platform (editcp) Remote Buffer Overflow Vulnerability

Solution:
Updates are reportedly available. Please contact the vendor for more information.

EDItran Communications Platform (editcp) Remote Buffer Overflow Vulnerability

References:

• Vendor Homepage (EDItran)
  
• Editran editcp V4.1 R7 - Remote buffer overflow (Pedro Andujar )