Netris Client-Side Buffer Overrun Vulnerability
BID:8400
Info
Netris Client-Side Buffer Overrun Vulnerability
| Bugtraq ID: | 8400 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2003-0685 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 12 2003 12:00AM |
| Updated: | Jul 11 2009 10:56PM |
| Credit: | The discovery of this vulnerability has been credited to Shaun Moore <[email protected]>. |
| Vulnerable: |
Netris Netris 0.5 Netris Netris 0.4 Netris Netris 0.3 |
| Not Vulnerable: |
Netris Netris 0.52 |
Discussion
Netris Client-Side Buffer Overrun Vulnerability
A client-side buffer overrun vulnerability has been reported for Netris. The issue is said to occur due to insufficient bounds checking when copying a server greeting into an internal memory buffer. Successful exploitation of this issue could potentially allow for the execution of arbitrary code with the privileges of the user invoking Netris.
A client-side buffer overrun vulnerability has been reported for Netris. The issue is said to occur due to insufficient bounds checking when copying a server greeting into an internal memory buffer. Successful exploitation of this issue could potentially allow for the execution of arbitrary code with the privileges of the user invoking Netris.
Exploit / POC
Netris Client-Side Buffer Overrun Vulnerability
The following proof of concept code has been provided, which demonstrates the exploitation of this issue to trigger a denial of service.
A second exploit has been released which exploits this issue to execute arbitrary code.
The following proof of concept code has been provided, which demonstrates the exploitation of this issue to trigger a denial of service.
A second exploit has been released which exploits this issue to execute arbitrary code.
References
Netris Client-Side Buffer Overrun Vulnerability
References:
References: