Real Networks Helix Universal Server/RealServer RTSP URI Handling Buffer Overflow Vulnerabilities
BID:7020
Info
Real Networks Helix Universal Server/RealServer RTSP URI Handling Buffer Overflow Vulnerabilities
| Bugtraq ID: | 7020 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 04 2003 12:00AM |
| Updated: | Mar 04 2003 12:00AM |
| Credit: | This issue was reported by Real Networks. |
| Vulnerable: |
RealNetworks Real Server 8.0 Beta RealNetworks Real Server 8.0 1 RealNetworks Real Server 8.0 RealNetworks Real Server 7.0.2 RealNetworks Real Server 7.0.1 RealNetworks Real Server 7.0 RealNetworks Real Server 5.0 RealNetworks Helix Universal Server 8.0 1 |
| Not Vulnerable: |
RealNetworks Real Server 8.0 2 RealNetworks Helix Universal Server 9.0 1 |
Discussion
Real Networks Helix Universal Server/RealServer RTSP URI Handling Buffer Overflow Vulnerabilities
RealNetworks has reported that buffer overflow vulnerabilities exist in Helix Universal Server/RealServer versions 8.01 and earlier. This is due to insufficient bounds checking of URIs by RTSP methods. Successful exploitation of these issues may result in execution of malicious instructions in the security context of the server process.
The issues were reported on Microsoft Windows platforms but also may also affect other platforms.
This issue may be related to previously reported issues (BID 6454, BID 6456 and BID 6458).
RealNetworks has reported that buffer overflow vulnerabilities exist in Helix Universal Server/RealServer versions 8.01 and earlier. This is due to insufficient bounds checking of URIs by RTSP methods. Successful exploitation of these issues may result in execution of malicious instructions in the security context of the server process.
The issues were reported on Microsoft Windows platforms but also may also affect other platforms.
This issue may be related to previously reported issues (BID 6454, BID 6456 and BID 6458).
Exploit / POC
Real Networks Helix Universal Server/RealServer RTSP URI Handling Buffer Overflow Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Real Networks Helix Universal Server/RealServer RTSP URI Handling Buffer Overflow Vulnerabilities
Solution:
Real Networks has advised users to upgrade to Helix Universal Networks 9.01 or RealServer version 8.02.
RealNetworks Helix Universal Server 8.0 1
Solution:
Real Networks has advised users to upgrade to Helix Universal Networks 9.01 or RealServer version 8.02.
RealNetworks Helix Universal Server 8.0 1
-
Real Networks Helix Universal Server 9.01
http://www.service.real.com/downloads.html
References
Real Networks Helix Universal Server/RealServer RTSP URI Handling Buffer Overflow Vulnerabilities
References:
References: