Dune HTTP Get Remote Buffer Overrun Vulnerability
BID:7945
Info
Dune HTTP Get Remote Buffer Overrun Vulnerability
| Bugtraq ID: | 7945 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 17 2003 12:00AM |
| Updated: | Jun 17 2003 12:00AM |
| Credit: | Discovery credited to Vade 79. |
| Vulnerable: |
Dune Dune 0.6.7 |
| Not Vulnerable: | |
Discussion
Dune HTTP Get Remote Buffer Overrun Vulnerability
It has been reported that Dune is vulnerable to a remote boundary condition error when handling long requests. This could allow a remote attacker to execute arbitrary code on a vulnerable system.
It has been reported that Dune is vulnerable to a remote boundary condition error when handling long requests. This could allow a remote attacker to execute arbitrary code on a vulnerable system.
Exploit / POC
Dune HTTP Get Remote Buffer Overrun Vulnerability
An exploit has been made available by Vade 79 <[email protected]>:
An exploit has been made available by Vade 79 <[email protected]>:
Solution / Fix
Dune HTTP Get Remote Buffer Overrun Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Dune HTTP Get Remote Buffer Overrun Vulnerability
References:
References:
- Dune Homepage (Dune Project)
- dune[0.6.7+-]: remote buffer overflow exploit. (httpd) (Vade 79