Netris Remote Memory Corruption Vulnerability
BID:5680
Info
Netris Remote Memory Corruption Vulnerability
| Bugtraq ID: | 5680 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2002-1566 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 09 2002 12:00AM |
| Updated: | Jul 11 2009 05:06PM |
| Credit: | Discovery of this issue is credited to Artur Byszko / bajkero <[email protected]>. |
| Vulnerable: |
Netris Netris 0.5 Netris Netris 0.4 Netris Netris 0.3 |
| Not Vulnerable: |
Netris Netris 0.52 |
Exploit / POC
Netris Remote Memory Corruption Vulnerability
An exploit has been released by Vade 79 <[email protected]>
that exploits this issue and opens a remote shell on the target system.
An exploit has been released by Vade 79 <[email protected]>
that exploits this issue and opens a remote shell on the target system.
Solution / Fix
Netris Remote Memory Corruption Vulnerability
Solution:
This vulnerability has been addressed in Netris 0.52.
Netris Netris 0.3
Netris Netris 0.4
Netris Netris 0.5
Solution:
This vulnerability has been addressed in Netris 0.52.
Netris Netris 0.3
-
Netris netris-0.52.tar.gz
ftp://ftp.netris.org/pub/netris/netris-0.52.tar.gz
Netris Netris 0.4
-
Netris netris-0.52.tar.gz
ftp://ftp.netris.org/pub/netris/netris-0.52.tar.gz
Netris Netris 0.5
-
Netris netris-0.5-0.52.diff
ftp://ftp.netris.org/pub/netris/netris-0.5-0.52.diff -
Netris netris-0.52.tar.gz
ftp://ftp.netris.org/pub/netris/netris-0.52.tar.gz
References
Netris Remote Memory Corruption Vulnerability
References:
References:
- netris-0.5. (Artur Byszko / bajkero
- netris[v0.5]: client/server remote buffer overflow exploit. (Vade 79