Alt-N WebAdmin USER Parameter Buffer Overflow Vulnerability

Bugtraq ID:	8024
Class:	Boundary Condition Error
CVE:	CVE-2003-0471 CVE-2003-0471
Remote:	Yes
Local:	No
Published:	Jun 24 2003 12:00AM
Updated:	Mar 19 2015 09:13AM
Credit:	Discovery is credited to Mark Litchfield <[email protected]>.
Vulnerable:	Alt-N WebAdmin 2.0.4 Alt-N WebAdmin 2.0.3 Alt-N WebAdmin 2.0.2 Alt-N WebAdmin 2.0.1 Alt-N WebAdmin 2.0 .0
Not Vulnerable:	Alt-N WebAdmin 2.0.5

Alt-N WebAdmin USER Parameter Buffer Overflow Vulnerability

Alt-N WebAdmin is prone to a buffer overflow condition. This is due to insufficient bounds checking on the USER parameter. Successful exploitation could result in code execution with SYSTEM level privileges.

Alt-N WebAdmin USER Parameter Buffer Overflow Vulnerability

Exploits have been made available by wirepair.

Exploit code 'altn_webadmin.pm' was provided by the Metasploit Framework project.

• /data/vulnerabilities/exploits/wa_exp.c
• /data/vulnerabilities/exploits/wa_dlexp.c
• /data/vulnerabilities/exploits/altn_webadmin.pm

Alt-N WebAdmin USER Parameter Buffer Overflow Vulnerability

Solution:
This issue has been addressed in WebAdmin 2.05:


Alt-N WebAdmin 2.0 .0

• Alt-N WebAdmin 2.05
  ftp://ftp.altn.com/WebAdmin/Release/wa205_en.exe

Alt-N WebAdmin 2.0.1

• Alt-N WebAdmin 2.05
  ftp://ftp.altn.com/WebAdmin/Release/wa205_en.exe

Alt-N WebAdmin 2.0.2

• Alt-N WebAdmin 2.05
  ftp://ftp.altn.com/WebAdmin/Release/wa205_en.exe

Alt-N WebAdmin 2.0.3

• Alt-N WebAdmin 2.05
  ftp://ftp.altn.com/WebAdmin/Release/wa205_en.exe

Alt-N WebAdmin 2.0.4

• Alt-N WebAdmin 2.05
  ftp://ftp.altn.com/WebAdmin/Release/wa205_en.exe

Alt-N WebAdmin USER Parameter Buffer Overflow Vulnerability

References:

• Alt-N Homepage (Alt-N)
  
• Remote Buffer Overrun WebAdmin.exe ("Mark Litchfield" )