Webresolve Host Name Buffer Overflow Vulnerability
BID:5175
Info
Webresolve Host Name Buffer Overflow Vulnerability
| Bugtraq ID: | 5175 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 07 2002 12:00AM |
| Updated: | Jul 07 2002 12:00AM |
| Credit: | Vulnerability announced by the Webresolve project. |
| Vulnerable: |
Webresolve Webresolve 0.1 Webresolve Webresolve 0.0.2 Webresolve Webresolve 0.0.1 |
| Not Vulnerable: |
Webresolve Webresolve 0.2 |
Discussion
Webresolve Host Name Buffer Overflow Vulnerability
Webresolve is a freely available, open source web log review software package. It is designed to reverse-resolve IP addresses in HTTPd logs, and print the hostnames.
Under some circumstances, it may be possible to cause a client-side overflow in Webresolve. Due to insufficient bounds checking, when Webresolve attempts to reverse-resolve an IP address, and the response from a nameserver is of excessive length, a buffer overflow occurs. This overflow could be used to overwrite stack memory, and execute attacker-supplied instructions.
Webresolve is a freely available, open source web log review software package. It is designed to reverse-resolve IP addresses in HTTPd logs, and print the hostnames.
Under some circumstances, it may be possible to cause a client-side overflow in Webresolve. Due to insufficient bounds checking, when Webresolve attempts to reverse-resolve an IP address, and the response from a nameserver is of excessive length, a buffer overflow occurs. This overflow could be used to overwrite stack memory, and execute attacker-supplied instructions.
Exploit / POC
Webresolve Host Name Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Webresolve Host Name Buffer Overflow Vulnerability
Solution:
Fix available.
Webresolve Webresolve 0.0.1
Webresolve Webresolve 0.0.2
Webresolve Webresolve 0.1
Solution:
Fix available.
Webresolve Webresolve 0.0.1
-
Webresolve webresolve-0.2.0.tar.gz
ftp://siag.nu/pub/webresolve/webresolve-0.2.0.tar.gz
Webresolve Webresolve 0.0.2
-
Webresolve webresolve-0.2.0.tar.gz
ftp://siag.nu/pub/webresolve/webresolve-0.2.0.tar.gz
Webresolve Webresolve 0.1
-
Webresolve webresolve-0.2.0.tar.gz
ftp://siag.nu/pub/webresolve/webresolve-0.2.0.tar.gz