Axis Embedded Device Authentication Buffer Overflow Vulnerability

Bugtraq ID:	6452
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 20 2002 12:00AM
Updated:	Dec 20 2002 12:00AM
Credit:	Discovery is credited to D.C. van Moolenbroek <[email protected]> and M.C. Schrijver <[email protected]>.
Vulnerable:	Axis Communications Serial Server 2490 Axis Communications Network DVR 2460 Axis Communications Network Camera 2120 Axis Communications Network Camera 2110 Axis Communications Network Camera 2100 Axis Communications MPEG-2 Video Server 250S Axis Communications 2420 Network Camera 2.33 Axis Communications 2400 Video Server 1.12 Axis Communications 2130 PTZ Network Camera 2.32 Axis Communications 2100 Network Camera 2.33
Not Vulnerable:

Axis Embedded Device Authentication Buffer Overflow Vulnerability

Axis Network Cameras, Video Servers, and Network Digital Video Recorders contain an unchecked buffer in the authentication code of their embedded web server. Exploitation may result in a denial of service or potential execution of arbitrary code.

Axis Embedded Device Authentication Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Axis Embedded Device Authentication Buffer Overflow Vulnerability

Solution:
Axis has released upgraded firmware for the affected devices:


Axis Communications Network Camera 2110

• Axis Communications Axis 2110 Network Camera (2.33.1)
  ftp://ftp.axis.com/pub_soft/cam_srv/cam_2110/sr/

Axis Communications Network Camera 2120

• Axis Communications Axis 2120 Network Camera (2.33.1)
  ftp://ftp.axis.com/pub_soft/cam_srv/cam_2120/sr/

Axis Communications Serial Server 2490

• Axis Communications Axis 2490 Serial Server (2.11.1)
  ftp://ftp.axis.com/pub_soft/cam_srv/cam_2490/sr/

Axis Communications Network Camera 2100

• Axis Communications Axis 2100 Network Camera (2.33.1)
  ftp://ftp.axis.com/pub_soft/cam_srv/cam_2100/sr/

Axis Communications MPEG-2 Video Server 250S

• Axis Communications Axis 250S MPEG-2 Video Server (3.02 RC1)
  ftp://ftp.axis.com/pub_soft/cam_srv/cam_250s/release_candidate/3_02/

Axis Communications Network DVR 2460

• Axis Communications Axis 2460 Network Digital Video Recorder (3.01)
  ftp://ftp.axis.com/pub_soft/cam_srv/cam_2460/sr/

Axis Communications 2400 Video Server 1.12

• Axis Communications Axis 2400 Video Server (2.33.1)
  ftp://ftp.axis.com/pub_soft/cam_srv/cam_2400/sr/

Axis Communications 2420 Network Camera 2.33

• Axis Communications Axis 2420 Network Camera (2.33.1)
  ftp://ftp.axis.com/pub_soft/cam_srv/cam_2420/sr/

Axis Communications 2100 Network Camera 2.33

• Axis Communications Axis 2401 Video Server (2.33.1)
  ftp://ftp.axis.com/pub_soft/cam_srv/cam_2401/sr/

Axis Embedded Device Authentication Buffer Overflow Vulnerability

References:

• Web server vulnerability in Axis Network Cameras, Video Servers and DVRs (Axis Product Security )