Srcpd Remote Integer Overflow Vulnerability
BID:8466
Info
Srcpd Remote Integer Overflow Vulnerability
| Bugtraq ID: | 8466 |
| Class: | Origin Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 21 2003 12:00AM |
| Updated: | Aug 21 2003 12:00AM |
| Credit: | The disclosure of this issue has been credited to Over G <[email protected]>. |
| Vulnerable: |
Srcpd Srcpd 2.0 |
| Not Vulnerable: | |
Discussion
Srcpd Remote Integer Overflow Vulnerability
A vulnerability has been reported in srcpd that allows a remote attacker to cause a denial of service by exploiting an integer overflow error. The exploitation of this problem would consist of an attacker connecting to a server and issuing the "go" command with a large integer value, causing an overflow condition.
This issue would lead to a denial of service. Execution of arbitrary code may well be possible.
Srcpd v2.0 has been reported to be vulnerable to this issue, however older version may be affected as well.
A vulnerability has been reported in srcpd that allows a remote attacker to cause a denial of service by exploiting an integer overflow error. The exploitation of this problem would consist of an attacker connecting to a server and issuing the "go" command with a large integer value, causing an overflow condition.
This issue would lead to a denial of service. Execution of arbitrary code may well be possible.
Srcpd v2.0 has been reported to be vulnerable to this issue, however older version may be affected as well.