Watchguard Extensible Threat Management CVE-2013-6021 Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	63227
Class:	Boundary Condition Error
CVE:	CVE-2013-6021
Remote:	Yes
Local:	No
Published:	Oct 18 2013 12:00AM
Updated:	Nov 01 2013 12:51AM
Credit:	Jerome Nokin and Thierry Zoller of Verizon Enterprise Solutions.
Vulnerable:
Not Vulnerable:

Watchguard Extensible Threat Management CVE-2013-6021 Stack Based Buffer Overflow Vulnerability

Watchguard Extensible Threat Management is prone to a remote stack-based buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data.

An attacker can leverage this issue to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition.

Watchguard Extensible Threat Management 11.7.4 is vulnerable; other versions may also be affected.

Watchguard Extensible Threat Management CVE-2013-6021 Stack Based Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Watchguard Extensible Threat Management CVE-2013-6021 Stack Based Buffer Overflow Vulnerability

References:

• WatchGuard Homepage (WatchGuard)