Pserv Request Method Buffer Overflow Vulnerability
BID:6284
Info
Pserv Request Method Buffer Overflow Vulnerability
| Bugtraq ID: | 6284 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 30 2002 12:00AM |
| Updated: | Nov 30 2002 12:00AM |
| Credit: | Discovery of this vulnerability credited to "Matthew Murphy" <[email protected]>. |
| Vulnerable: |
Pserv Pserv 2.0 beta 5 Pserv Pserv 2.0 beta 3 Pserv Pserv 2.0 beta 2 Pserv Pserv 2.0 beta 1 |
| Not Vulnerable: | |
Discussion
Pserv Request Method Buffer Overflow Vulnerability
A buffer overflow vulnerability has been reported in Pserv. The buffer overflow condition is due to the way Pserv handles data streams from remote connections. Reportedly, Pserv reads 1024 bytes at a time from a connected socket but fails to allocate sufficient space in local buffers for the data. Due to this, it may be possible to corrupt sensitive memory on the system stack.
This may cause the web server to exhibit signs of unpredictable behaviour. Although it has not been confirmed, it may be possible for an attacker to execute arbitrary code.
A buffer overflow vulnerability has been reported in Pserv. The buffer overflow condition is due to the way Pserv handles data streams from remote connections. Reportedly, Pserv reads 1024 bytes at a time from a connected socket but fails to allocate sufficient space in local buffers for the data. Due to this, it may be possible to corrupt sensitive memory on the system stack.
This may cause the web server to exhibit signs of unpredictable behaviour. Although it has not been confirmed, it may be possible for an attacker to execute arbitrary code.
Exploit / POC
Pserv Request Method Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Pserv Request Method Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.