Progress Database DLC Environment Variable Buffer Overflow Vulnerability
BID:7312
Info
Progress Database DLC Environment Variable Buffer Overflow Vulnerability
| Bugtraq ID: | 7312 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 03 2003 12:00AM |
| Updated: | Apr 03 2003 12:00AM |
| Credit: | The discovery of this vulnerability is credited to SNOSoft. |
| Vulnerable: |
Progress Database 9.1 D Progress Database 9.1 C Progress Database 9.1 B Progress Database 8.3 V Progress Database 8.3 E Progress Database 8.3 D |
| Not Vulnerable: | |
Discussion
Progress Database DLC Environment Variable Buffer Overflow Vulnerability
A vulnerability has been discovered in Progress Database. The problem occurs due to insufficient bounds checking when reading in the 'DLC' environment variable. As a result, it may be possible for a malicious local user to corrupt sensitive program memory when invoking the program. Successful exploitation of this issue may allow an attacker to execute arbitrary code, with the privileges of the Progress process,
A vulnerability has been discovered in Progress Database. The problem occurs due to insufficient bounds checking when reading in the 'DLC' environment variable. As a result, it may be possible for a malicious local user to corrupt sensitive program memory when invoking the program. Successful exploitation of this issue may allow an attacker to execute arbitrary code, with the privileges of the Progress process,
Exploit / POC
Progress Database DLC Environment Variable Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] .
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] .
Solution / Fix
Progress Database DLC Environment Variable Buffer Overflow Vulnerability
Solution:
Progress has released service pack 9.1D05. Users are advised to upgrade as soon as possible.
Progress Database 9.1 D
Solution:
Progress has released service pack 9.1D05. Users are advised to upgrade as soon as possible.
Progress Database 9.1 D
-
Progress Progress Database 9.1D05
http://www.progress.com/patches/