Sphera HostingDirector VDS Control Panel Multiple Buffer Overflow Vulnerabilities
BID:7895
Info
Sphera HostingDirector VDS Control Panel Multiple Buffer Overflow Vulnerabilities
| Bugtraq ID: | 7895 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2003 12:00AM |
| Updated: | Jun 13 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to "Lorenzo Hernandez Garcia-Hierro" <[email protected]>. |
| Vulnerable: |
Sphera HostingDirector 3.0 Sphera HostingDirector 2.0 Sphera HostingDirector 1.0 |
| Not Vulnerable: | |
Discussion
Sphera HostingDirector VDS Control Panel Multiple Buffer Overflow Vulnerabilities
Sphera HostingDirector VDS Control Panel has been reported prone to multiple buffer overflow vulnerabilities.
The issues present themselves, likely due to insufficient bounds checking performed when copying user-supplied data into reserved memory space. Reportedly an attacker may supply excessive data via URI parameters passed to the HostingDirector scripts. It has also been reported that it may be possible to supply excessive data via local cookie data.
An attacker may exploit this vulnerability to trigger a remote denial of service condition in the Sphera HostingDirector server.
Sphera HostingDirector VDS Control Panel has been reported prone to multiple buffer overflow vulnerabilities.
The issues present themselves, likely due to insufficient bounds checking performed when copying user-supplied data into reserved memory space. Reportedly an attacker may supply excessive data via URI parameters passed to the HostingDirector scripts. It has also been reported that it may be possible to supply excessive data via local cookie data.
An attacker may exploit this vulnerability to trigger a remote denial of service condition in the Sphera HostingDirector server.
Solution / Fix
Sphera HostingDirector VDS Control Panel Multiple Buffer Overflow Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.