T. Hauck Jana Server SOCKS5 Proxy Server Authentication Buffer Overflow Vulnerability

Bugtraq ID:	5321
Class:	Boundary Condition Error
CVE:	CVE-2002-1062
Remote:	Yes
Local:	No
Published:	Jul 26 2002 12:00AM
Updated:	Jul 11 2009 02:56PM
Credit:	Discovered by 3APA3A <[email protected]>.
Vulnerable:	T. Hauck Jana Webserver 2.2.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 2.0 Beta2 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 2.0 Beta1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 2.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 1.46 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 1.45 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 1.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0
Not Vulnerable:

T. Hauck Jana Server SOCKS5 Proxy Server Authentication Buffer Overflow Vulnerability

Jana Server is a server for Microsoft Windows based systems. Jana Server provides a wide range of proxy servers, and a number of other services. A SOCKS5 proxy server is included.

A buffer overflow vulnerability has been reported in the SOCKS5 proxy server. Reportedly, when authenticating a client, a username, password or hostnamed longer than 127 characters may cause an error.

T. Hauck Jana Server SOCKS5 Proxy Server Authentication Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

T. Hauck Jana Server SOCKS5 Proxy Server Authentication Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

T. Hauck Jana Server SOCKS5 Proxy Server Authentication Buffer Overflow Vulnerability

References:

• Jana Webserver (Thomas Hauck)