BID:5831

WN Server Malformed GET Request Buffer Overflow Vulnerability

Info

WN Server Malformed GET Request Buffer Overflow Vulnerability

Bugtraq ID:	5831
Class:	Boundary Condition Error
CVE:	CVE-2002-1166
Remote:	Yes
Local:	No
Published:	Sep 30 2002 12:00AM
Updated:	Jul 11 2009 05:06PM
Credit:	Discovery of this issue is credited to badc0ded <[email protected]>.
Vulnerable:	WN Server WN Server 2.0 .0 WN Server WN Server 1.19.9 WN Server WN Server 1.19.8 WN Server WN Server 1.19.7 WN Server WN Server 1.19.6 WN Server WN Server 1.19.5 WN Server WN Server 1.19.4 WN Server WN Server 1.19.3 WN Server WN Server 1.19.2 WN Server WN Server 1.19.1 WN Server WN Server 1.19 .0 WN Server WN Server 1.18.7 WN Server WN Server 1.18.6 WN Server WN Server 1.18.5 WN Server WN Server 1.18.4 WN Server WN Server 1.18.3 WN Server WN Server 1.18.2

Not Vulnerable:	WN Server WN Server 2.4.4

Discussion

WN Server Malformed GET Request Buffer Overflow Vulnerability

WN Server is prone to a remotely exploitable buffer overflow. This is due to insufficient bounds checking of data received in HTTP GET requests. It is possible to send an overly long request to the server and cause process memory to be corrupted with attacker-supplied data.

This condition may be exploited to execute arbitrary code with the privileges of the webserver process.

This issue is reported to be present in WN Server version 1.18.2 through 2.0.0. It is possible that other versions may also be affected by this vulnerability.

Exploit / POC

WN Server Malformed GET Request Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

WN Server Malformed GET Request Buffer Overflow Vulnerability

Solution:
This issue has been reportedly addressed in WN Server 2.4.4. Those affected by this vulnerability are advised to upgrade.

WN Server WN Server 1.18.2