DevonIT Management Tool Buffer Overflow Vulnerability and Information Disclosure Vulnerability

Bugtraq ID:	42641
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 24 2010 12:00AM
Updated:	Aug 24 2010 12:00AM
Credit:	Kevin Finisterre
Vulnerable:	DevonIT Management Tool 0
Not Vulnerable:

DevonIT Management Tool Buffer Overflow Vulnerability and Information Disclosure Vulnerability

DevonIT Management Tool is prone to a buffer-overflow vulnerability and an information-disclosure vulnerability.

Attackers can exploit the buffer-overflow vulnerability to execute arbitrary code within the context of the affected application or crash the application.

Attackers can exploit the information-disclosure vulnerability to gain access to unencrypted network traffic. Successful exploits may compromise the affected application.

DevonIT Management Tool Buffer Overflow Vulnerability and Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

DevonIT Management Tool Buffer Overflow Vulnerability and Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

DevonIT Management Tool Buffer Overflow Vulnerability and Information Disclosure Vulnerability

References:

• Vendor Homepage (DevonIT)
  
• Vulnerability Note VU#278785 (US-CERT)