AutomatedShops WebC Script Name Remote Buffer Overrun Vulnerability
BID:7268
Info
AutomatedShops WebC Script Name Remote Buffer Overrun Vulnerability
| Bugtraq ID: | 7268 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 03 2003 12:00AM |
| Updated: | Apr 03 2003 12:00AM |
| Credit: | Discovery credited to Carl Livitt <[email protected]>. |
| Vulnerable: |
AutomatedShops WebC 5.0 05 AutomatedShops WebC 5.0 AutomatedShops WebC 2.0 11 |
| Not Vulnerable: |
AutomatedShops WebC 5.0 20 |
Discussion
AutomatedShops WebC Script Name Remote Buffer Overrun Vulnerability
It has been reported that a boundary condition error exists in WebC. Because of this, it may be possible for a remote attacker to gain unauthorized access to a vulnerable host.
It has been reported that a boundary condition error exists in WebC. Because of this, it may be possible for a remote attacker to gain unauthorized access to a vulnerable host.
Exploit / POC
AutomatedShops WebC Script Name Remote Buffer Overrun Vulnerability
The following proof of concept was supplied by :
http://www.example.com/cgi-bin/webc.cgi/AX (where X represents an additional 549 'A' characters)
The following proof of concept was supplied by :
http://www.example.com/cgi-bin/webc.cgi/AX (where X represents an additional 549 'A' characters)
Solution / Fix
AutomatedShops WebC Script Name Remote Buffer Overrun Vulnerability
Solution:
A new version has been made available to address this issue:
AutomatedShops WebC 2.0 11
AutomatedShops WebC 5.0 05
AutomatedShops WebC 5.0
Solution:
A new version has been made available to address this issue:
AutomatedShops WebC 2.0 11
-
AutomatedShops WebC 5.020
ftp://ftp.automatedshops.com/pub/webc/5.020/
AutomatedShops WebC 5.0 05
-
AutomatedShops WebC 5.020
ftp://ftp.automatedshops.com/pub/webc/5.020/
AutomatedShops WebC 5.0
-
AutomatedShops WebC 5.020
ftp://ftp.automatedshops.com/pub/webc/5.020/