IBM OmniFind 'password' Field Remote Buffer Overflow Vulnerability

Bugtraq ID:	44939
Class:	Input Validation Error
CVE:	CVE-2010-3894
Remote:	Yes
Local:	No
Published:	Nov 09 2010 12:00AM
Updated:	Nov 09 2010 12:00AM
Credit:	Fatih Kilic
Vulnerable:
Not Vulnerable:

IBM OmniFind 'password' Field Remote Buffer Overflow Vulnerability

IBM OmniFind is prone to a remote buffer-overflow vulnerability because it fails to perform adequate checks on user-supplied input.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code with root privileges. Failed attacks will cause denial-of-service conditions.

Versions prior to IBM OmniFind 8.5 Fixpack 6 are vulnerable.

NOTE: This issue was previously covered in BID 44740 (IBM OmniFind Multiple Vulnerabilities) but has been given its own record to better document it.

IBM OmniFind 'password' Field Remote Buffer Overflow Vulnerability

Attackers can exploit this issue using a browser.

IBM OmniFind 'password' Field Remote Buffer Overflow Vulnerability

Solution:
Reportedly the vendor has fixed this issue, however Symantec has not confirmed it. Please contact the vendor for more information.

IBM OmniFind 'password' Field Remote Buffer Overflow Vulnerability

References:

• IBM OmniFind Homepage (IBM)
  
• IBM OmniFind several issues (Fatih Kilic)
  
• IBM OmniFind - several vulnerabilities (Fatih Kilic )