AnalogX Proxy URI Buffer Overflow Vulnerability

Bugtraq ID:	7681
Class:	Boundary Condition Error
CVE:	CVE-2003-0410
Remote:	Yes
Local:	No
Published:	May 26 2003 12:00AM
Updated:	Jul 11 2009 10:06PM
Credit:	Discovery of this issue is credited to "K. K. Mookhey" <[email protected]>.
Vulnerable:	AnalogX Proxy 4.13
Not Vulnerable:	AnalogX Proxy 4.14

AnalogX Proxy URI Buffer Overflow Vulnerability

AnalogX Proxy is prone to a buffer overflow due to insufficient bounds checking of client-supplied URIs. This could result in execution of arbitrary code in the context of the AnalogX Proxy server.

AnalogX Proxy URI Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

AnalogX Proxy URI Buffer Overflow Vulnerability

Solution:
This issue has been addressed in AnalogX Proxy 4.14.


AnalogX Proxy 4.13

• AnalogX Proxy 4.14
  http://www.analogx.com/contents/download/network/proxy.htm

AnalogX Proxy URI Buffer Overflow Vulnerability

References:

• AnalogX Proxy Home Page (AnalogX)
  
• NII Advisory - Buffer Overflow in Analogx Proxy ("K. K. Mookhey" )