Sun AnswerBook2 Gettransbitmap Buffer Overflow Vulnerability
BID:4784
Info
Sun AnswerBook2 Gettransbitmap Buffer Overflow Vulnerability
| Bugtraq ID: | 4784 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2002-0360 |
| Remote: | Yes |
| Local: | No |
| Published: | May 21 2002 12:00AM |
| Updated: | Jul 11 2009 12:46PM |
| Credit: | Credited to Kevin Kotas. |
| Vulnerable: |
Sun AnswerBook2 1.4.3 Sun AnswerBook2 1.4.2 Sun AnswerBook2 1.4.1 Sun AnswerBook2 1.4 |
| Not Vulnerable: | |
Discussion
Sun AnswerBook2 Gettransbitmap Buffer Overflow Vulnerability
Sun AnswerBook2 is vulnerable to a buffer overflow condition. The vulnerability exists in the gettransbitmap CGI. It has been reported that the gettransbitmap CGI does not perform proper bounds checking on the filename argument.
It is possible for a remote malicious attacker to craft a request that will result in code execution on the vulnerable system.
Sun AnswerBook2 is vulnerable to a buffer overflow condition. The vulnerability exists in the gettransbitmap CGI. It has been reported that the gettransbitmap CGI does not perform proper bounds checking on the filename argument.
It is possible for a remote malicious attacker to craft a request that will result in code execution on the vulnerable system.
Exploit / POC
Sun AnswerBook2 Gettransbitmap Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Sun AnswerBook2 Gettransbitmap Buffer Overflow Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Sun AnswerBook2 Gettransbitmap Buffer Overflow Vulnerability
References:
References:
- AnswerBook2 Server Webpage (Sun Microsystems)
- eSO Security Advisory: 5063 (eSecurityOnline)
- Solaris[tm] Product Line (Sun Microsystems)