PlanetDNS PlanetWeb Malformed Request Remote Buffer Overflow Vulnerability

Bugtraq ID:	5988
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 17 2002 12:00AM
Updated:	Oct 17 2002 12:00AM
Credit:	Vulnerability discovery credited to securma massine <[email protected]>.
Vulnerable:	PlanetDNS PlanetWeb 1.14
Not Vulnerable:	PlanetDNS PlanetWeb 1.15

PlanetDNS PlanetWeb Malformed Request Remote Buffer Overflow Vulnerability

PlanetWeb is a commercially available web server integrated with dynamic DNS services. It is distributed by PlanetDNS, and available for Microsoft Operating Systems.

PlanetWeb does not properly handle long requests. Due to insufficient bounds checking, a long request sent to PlanetWeb may result in a buffer overflow. This could result in a denial of service, and has been reported as being exploitable to execute arbitrary code.

PlanetDNS PlanetWeb Malformed Request Remote Buffer Overflow Vulnerability

Exploit contributed by securma massine <[email protected]>:

• /data/vulnerabilities/exploits/planetweb-longrequest-ex.pl

PlanetDNS PlanetWeb Malformed Request Remote Buffer Overflow Vulnerability

Solution:
A fix is available:


PlanetDNS PlanetWeb 1.14

• PlanetDNS mshweb.msh
  http://www.planetdns.net/plugins/mshweb.msh

PlanetDNS PlanetWeb Malformed Request Remote Buffer Overflow Vulnerability

References:

• PlanetWeb Product Page (PlanetDNS)